investigate-bug

SUSPICIOUS. The stated purpose is coherent for bug investigation, but the skill’s actual footprint relies on an unidentified external CLI and subagent with no install provenance or publisher verification. That makes the delegation chain hard to trust, though there is no direct evidence of malicious behavior, credential harvesting, or exfiltration in the provided text.