intake

SUSPICIOUS. The skill’s capabilities mostly align with its stated purpose of external-text intake into a graph, and there is no evidence of credential theft, malicious exfiltration, or remote-code execution. However, its core dependence on unverifiable `iskron_*` tools creates a mandatory high supply-chain risk floor because the actual execution surface cannot be independently validated from public evidence.