cali-product-scope-executor

SUSPICIOUS: the skill’s core behavior is coherent with a plan-execution orchestrator, but it grants high autonomous agency, executes plan-influenced commands, and relies on loosely specified external Pi tools/skills. I found no clear credential theft, exfiltration endpoint, or confirmed malware, but the transitive trust and unattended execution model make it a medium-to-high operational risk skill.