cps

SUSPICIOUS. The skill’s medical reasoning workflow is broadly consistent with its purpose and mostly uses local files plus normal web research, but the optional lit-review CLI is an unresolved trust gap: its publisher, install path, and credential/data endpoints are not documented, yet it may receive .env-backed API keys and patient-derived queries. Without that optional dependency, risk is moderate; with it enabled, risk increases materially.