karpathy-kb

Overall benign-to-suspicious leaning medium risk: the skill’s file operations and wiki-maintenance behavior match its stated purpose, but it explicitly chains to multiple companion skills and processes untrusted external content before writing back into the vault. Main concerns are transitive trust and prompt-injection exposure, not confirmed malware or direct credential theft.