conductor-digest

SUSPICIOUS due to transitive trust, not overt malicious behavior. The stated purpose and local read-only digest behavior are coherent, but requiring an unspecified separate `conductor` skill creates a meaningful supply-chain and transitive installation risk because the actual executed logic lives partly outside this snippet.