headless-ghidra-discovery

SUSPICIOUS: The skill’s behavior is purpose-aligned and locally scoped, with no obvious credential theft or exfiltration path. However, it is fully dependent on an unverifiable required CLI (ghidra-agent-cli), so install/execution trust is high risk under the skill-scoring rules.