chief-of-staff

SUSPICIOUS: the core orchestration behavior is consistent with the stated purpose, and the provided skill text shows no direct malware, credential harvesting, or exfiltration. Risk comes from broad transitive dependence on many externally referenced skills installed through third-party marketplaces/CLIs with weak provenance clarity and no visible pinning or verification.