last30days

SUSPICIOUS: The research workflow itself is coherent, and reading external content is proportionate to the stated purpose. The main issue is install/execution trust: the skill’s X functionality depends on an unspecified `bird` CLI and forwards credentials to it, creating a significant credential-forwarding and supply-chain risk without enough provenance to treat it as benign.