graphify

SUSPICIOUS. The core package/install path and data flows are mostly coherent with a knowledge-graph skill, so this is not confirmed malware. The main risk is disproportionate AI-agent execution scope: it processes untrusted external and local content using general-purpose subagents with write/bash access, creating significant indirect prompt-injection and automation risk.