analysis-core

SUSPICIOUS: the skill's stated purpose is benign process guidance, but it instructs installation of an external skill bundle through a transitive trust path, using a wildcard selector that exceeds least privilege. No direct exfiltration or malicious behavior is present in this skill, but the install pattern materially raises risk.