field-audit

SUSPICIOUS. The core capabilities are coherent for a pane-auditing skill, and the local file/CLI access is proportionate to that purpose. The main risk is transitive skill installation via `npx skills add ... -s '*'`, which broadens trust to another skill set and warrants medium risk even without clear malicious behavior.