spine-advise

SUSPICIOUS. The stated purpose and visible permissions are mostly coherent, but the skill’s main action depends on an unseen envoy script and unseen external-provider routing. That makes data-flow and install/execution trust unverifiable from the provided files, so risk is moderate rather than clearly benign.