llm-council

SUSPICIOUS. The core purpose and capabilities mostly align: structured decision support, local evidence gathering, subagent debate, and report generation. Main risk comes from broad subagent orchestration and processing untrusted repository content with write/exec abilities, plus transitive reliance on other internal skills. No clear credential harvesting, remote exfiltration, or malicious installer behavior is present.