convex

SUSPICIOUS due to dynamic remote procedure fetching and transitive skill/guidance installation, but not malicious. The core footprint largely matches a Convex ecosystem router, and the main install path appears official and same-org; the residual risk comes from trusting remote, mutable instructions that can steer later agent actions.