connect-agent

SUSPICIOUS. The core Calibrate CLI actions and codebase-to-endpoint workflow align with the stated purpose, but the instruction to silently self-update the skill before acting is a meaningful trust and concealment issue. Risk is driven more by hidden mutable-instruction behavior than by the Calibrate integration itself.