sdd-status

SUSPICIOUS. The skill’s purpose and capabilities mostly align, and no overt malware or credential harvesting is shown. However, it relies on an ambiguously identified external Engram MCP/persistence tool with no pinned source or verifiable publisher relationship in the skill, creating medium trust risk despite otherwise limited scope.