standing

SUSPICIOUS. The skill's messaging/standing capabilities fit its stated purpose, but its core dependency is an unverifiable local bridge script that the agent is told to execute and update directly. I see no clear evidence of credential theft or overt malware, but the opaque bridge creates high supply-chain and execution-trust risk.