tool-selector

SUSPICIOUS. The core tool-planning behavior is coherent and low risk, but the skill also directs the agent to install another unpinned third-party skill from a personal GitHub repo via the skills CLI. That transitive trust expansion is disproportionate to a tool-selection skill and is the main reason for elevated risk; there is no clear evidence of malware or credential theft.