courtlistener

SUSPICIOUS. The legal-research purpose and CourtListener data flows are coherent and mostly benign, with official API/S3 endpoints and no credential harvesting. The main concern is the load-time pre-execution command that silently executes an unverified local helper (`skill-toc`), creating disproportionate execution trust risk even though the command does not obviously exfiltrate data or fetch remote code.