OSINT

SUSPICIOUS: The core OSINT purpose is plausible, but the skill has disproportionate behavior: a mandatory pre-action localhost POST, broad local state access, and automatic invocation of unverified other skills. No confirmed malware or remote payload execution is present, but the transitive trust and autonomous action scope make this medium risk.