scout

SUSPICIOUS. The default local grep/graph behavior is broadly consistent with codebase discovery, but the skill is over-scoped and carries notable trust expansion: auto-invoking other skills, spawning subagents, and optionally sending repo search work through external CLIs. No confirmed malware or overt credential theft is present, but the footprint is larger than its stated purpose and the external-engine path raises medium supply-chain and data-exposure risk.