docs

SUSPICIOUS. The core function is benign documentation maintenance, but the skill’s actual footprint is over-scoped: it mandates external MCP/services, issue-tracker gating, persistent memory logging, and an external command proxy (rtk) for all terminal actions. There is no clear evidence of malware or credential theft, but the capability set is broader than necessary for a low-risk docs skill and introduces meaningful supply-chain and data-handling risk.