funnel-architecture

SUSPICIOUS: the main funnel-design behavior is benign, but the skill's real footprint is broader than advertised. Opaque local RMBC executables handle update checks, telemetry, and workspace changes, so install trust and data-flow integrity are not fully verifiable; this makes the skill high-risk from a supply-chain perspective even without clear evidence of malware.