type-specimen

SUSPICIOUS due to install-trust ambiguity rather than malicious behavior: the skill’s purpose, data flows, and permissions are mostly proportionate, and Google Fonts usage is official, but the core scripts/specimen executable is required and not verifiably sourced from the skill text. No credential harvesting or overt exfiltration is evident.