brain

SUSPICIOUS. The skill’s stated purpose is coherent and its commands are proportionate for local knowledge management, with no credential requests or third-party data routing. However, it requires a local `brain` CLI whose provenance is not verifiable from the skill: the binary name is generic, multiple unrelated tools share it, and the skill gives no official install source, package identity, checksum, or publisher linkage. Under the mandatory override for unverifiable executables, this makes the skill high security risk even without direct signs of malware.