radar

SUSPICIOUS. The skill's capabilities mostly fit its stated purpose, and the prompt-injection warning is substantially mitigated by explicit instructions not to obey fetched content. The main risks are unattended operation with write+git-push effects and reliance on a third-party scraping provider for X/LinkedIn, which is proportionate but increases trust and credential-routing exposure.