brainstorm-workflow

SUSPICIOUS: the host’s stated purpose matches its behavior, and there is no direct credential harvesting or exfiltration. The main risk is transitive trust: it installs/loads external skills from GitHub via `npx skills add`, so safety depends on those downstream skills and the CLI.