research

SUSPICIOUS: purpose and capabilities mostly align, but the skill relies on an unverifiable `crew-dispatch` mechanism and combines untrusted web ingestion with repo write access. Main concern is execution trust and prompt-injection exposure, not confirmed malware or credential theft.