krt-compound-master

SUSPICIOUS: the skill’s orchestration purpose broadly matches its capabilities, but it relies heavily on transitive installation and execution of many external KRT skills from a third-party GitHub publisher. Data-flow and credential handling look restrained, so this is not clearly malicious, but the trust footprint is larger than ideal and warrants medium risk.