westlaw

The Westlaw retrieval workflow is mostly aligned with its stated purpose and routes data to official Westlaw endpoints through the user's own browser session. The main security issue is the load-time pre-execution command, which can run an unverified local `skill-toc` binary from PATH or a home-directory plugin location before normal review; that makes the skill suspicious due to execution trust, not because of clear credential theft or exfiltration.