plan-graph

The skill’s stated purpose aligns with its local file-processing behavior, and there is no clear credential theft or network exfiltration path in the provided text. However, the core capability depends on executing an unverifiable user-local Python CLI with no documented provenance or release integrity, so the overall classification is suspicious/high-risk from a supply-chain trust perspective rather than confirmed malware.