skill-name

SUSPICIOUS: the template's stated purpose is benign and its declared capabilities fit legal document review, but it delegates core processing to an underspecified `office-mcp` dependency with unclear provenance and ambiguous data handling. The skill itself shows no direct malicious behavior, credentials abuse, or exfiltration logic, yet the external trust chain and broader MCP ecosystem make it medium risk rather than benign.