gepetto

SUSPICIOUS: The core planning behavior is coherent, but the skill expands its footprint through Bash-mediated external LLM review and optional autonomous handoff to additional tools whose trust relationship is only partly verified. No clear credential harvesting or outright malicious behavior is shown, but the external data flows, transitive tool trust, and prompt-injection exposure make the skill medium risk.