rota-learn

SUSPICIOUS: The skill’s behavior mostly matches its stated purpose of persisting session learnings, and there is no clear exfiltration or credential theft. The main risks are approval bypass plus reliance on an unverified local `rota` CLI that can rewrite knowledge and instruction files autonomously.