workflow-hello-world

SUSPICIOUS: the visible shortcut is narrowly scoped, but it delegates control to an unseen meta-skill and relies on Deepline tooling that may forward prompt/session data to external services. The install source appears same-org official, so this is not strong malware evidence, but the transitive trust and external data handling make the overall skill medium risk.