book-distill

SUSPICIOUS: the stated purpose and main capabilities are mostly coherent for a book-to-skill distillation workflow, and there is no clear credential theft or exfiltration path. Risk comes from executing an opaque local script, relying on transitive upstream skills, and transforming untrusted book text into future executable agent skills, which creates moderate supply-chain and indirect prompt-injection exposure.