pi-team

SUSPICIOUS: the core orchestration behavior matches the stated purpose, but the installation provenance is inconsistent with surfaced official documentation and the skill delegates potentially sensitive project data to multiple unspecified provider CLIs without clear trust or auth guidance. This looks more like a supply-chain and scope/transparency problem than confirmed malware.