ecosystem-orchestration

SUSPICIOUS. The skill is internally coherent as an orchestration map, but its main operational behavior is to install other skills via an unseen local script, creating a transitive trust chain with limited provenance and no visibility into downstream actions. No direct credential theft or malicious exfiltration is shown in the provided text, but install trust risk is material.