rota-plan

SUSPICIOUS. The skill’s behavior mostly matches its planning purpose and does not directly harvest credentials or use overt exfiltration endpoints, but it delegates core read/write actions to an external `rota` CLI whose provenance and network behavior are not specified inside the skill. That makes this a moderate supply-chain and data-flow trust risk rather than confirmed malware.