the-operator

SUSPICIOUS due to install/execution trust: the skill’s operational capabilities match its purpose, but it depends on an undocumented and unverified `agenthood` CLI whose provenance could not be established from the supplied evidence. Data flow and credential scope are otherwise narrow and locally scoped, so the main concern is unverifiable external-tool trust rather than confirmed malicious behavior.