chain-builder

SUSPICIOUS: the skill’s stated workflow-orchestration purpose mostly matches its local file and chain-management behavior, but trust is weakened by dependence on an unverifiable Brainbrew MCP server, plugin-install transitive trust, and automatic propagation of prior agent output into later prompts. No confirmed malware or explicit credential exfiltration is shown, but the execution surface is broader than a simple workflow template helper.