sync

SUSPICIOUS. The document sync behavior is mostly coherent, but the built in discovery and installation of additional Agent Skills and optional MCPs is a significant scope expansion. The main risk is transitive trust and third party skill installation through npx skills, not confirmed malware or direct credential theft.