council

SUSPICIOUS: the core purpose is coherent, and there is no clear malware or deceptive credential-harvesting path, but the skill has a broad agent footprint. Its main risk is indirect prompt injection from external search/GitHub-style content combined with write/task capabilities and wide context gathering from local files and MCP services.