rmbc-copy-audit

SUSPICIOUS. The core audit behavior matches the stated purpose, but the skill also invokes hidden local RMBC binaries for update checks, analytics, and workspace changes. The largest concern is unverifiable helper executables and unclear telemetry data flow, not overt malware or obvious credential theft.