ops-dash

SUSPICIOUS: the dashboard behavior is partly coherent, but its footprint is broader than a simple UI because it routes into autonomous and real-world-action skills, edits config, and can trigger external comms/email/share flows. No clear credential theft or covert exfiltration is present in this skill alone, but the transitive trust and YOLO/autonomy framing make it medium-high risk.