knowledge-management

SUSPICIOUS: The skill’s purpose is coherent, and its footprint is narrow, but trust is weakened by the unspecified `nlweb-mcp` endpoint, opaque OAuth routing, and undocumented remote data path for proprietary company information. No direct malware indicators, exploit behavior, or installer abuse are present, but the missing provenance and data-flow details make this a medium-risk external-service dependency.