bible-fact-check

SUSPICIOUS. The core review behavior is mostly aligned with the stated Bible fact-checking purpose, but the skill is not self-contained: it requires transitive installation of another skill, executes its scripts and dependency setup, and fetches arbitrary web content with browser automation while retaining shell and file-write actions. No strong evidence of credential theft or deliberate exfiltration is present, so this is better classified as elevated supply-chain and agent-safety risk rather than malware.