world-builder

SUSPICIOUS: the core world-building behavior is coherent, but the skill expands into autonomous external research and state-changing MCP actions without confirmation. Main risks are indirect prompt injection from untrusted web/social content and unresolved trust in the underlying socialdata MCP implementation, not confirmed malware.