surfacer

SUSPICIOUS: the visible skill is mostly a stub that pushes the agent into trusting a local binary and its embedded manual, which are not reviewable here. No explicit credential harvesting or exfiltration is shown, and the declared scope is otherwise narrow, but the hidden-in-binary instruction path creates medium trust risk.