vectorcraft-cli-selection

SUSPICIOUS: the skill’s stated purpose largely matches its capabilities for VectorCraft object selection and bounded editing, and the command-injection findings are benign documentation artifacts. The main security concern is transitive trust: the skill depends on installing/loading other skills (especially vectorcraft-harness and related skills), which broadens the trust boundary and execution surface beyond this single skill.