llm-wiki

SUSPICIOUS: the skill's core behavior matches its wiki purpose, but it combines untrusted-content ingestion with AI-driven synthesis and file writes, creating meaningful indirect prompt-injection risk. Supply-chain risk is moderate due to unpinned pip/npm dependencies, while there is little evidence of credential theft or overtly malicious behavior.