oss-forensics-orchestration

SUSPICIOUS. The stated purpose and most capabilities align with an OSS forensics workflow, and data flows mainly target official services (GitHub, Google BigQuery/GH Archive, Wayback). However, the skill requires opaque local executables/scripts not verifiable from the skill text and gives them access to credentials/workflow control; combined with broad external-content ingestion and arbitrary vendor-domain fetches, this creates high security risk despite limited evidence of deliberate malicious intent.