document-handoff

SUSPICIOUS. The stated purpose and requested local file access are broadly coherent, and the skill text shows no direct credential theft or third-party routing. However, the skill's entire function is delegated to an unverifiable local cli.mjs discovered from cache/skill directories, with broad access to project and session data and no provenance, pinning, or integrity checks exposed in the skill. That creates a significant supply-chain and transitive-trust risk even without confirmed malicious behavior.