using-oac

SUSPICIOUS: the file is not overt malware, but its purpose is to compel transitive loading of other OAC skills before any response, expanding trust and control beyond the reviewed content. Risk is mainly workflow coercion and inherited behavior from downstream skills, not direct exfiltration or payload execution.