standup

SUSPICIOUS: the stated purpose is coherent and the visible data flow appears local-only, but the skill executes an unprovided local script at load time using pre-execution syntax. There is no evidence of credential theft or outbound exfiltration in the supplied text, yet the hidden script dependency and automatic execution make the skill higher risk than a normal documentation-only skill.