wayfinder

SUSPICIOUS. The core planning/tracker behavior is coherent with the stated purpose, and there is no direct credential theft or exfiltration path in the skill text. The main concern is transitive trust: it instructs installation/use of other skills, including a third-party `/pstack-swarm`, through an unpinned `npx skills` workflow; that makes the skill family materially riskier even though this specific file is not overtly malicious.