ai-matching-records

SUSPICIOUS: The record-matching capability is coherent with the stated purpose, and the examples are mostly benign documentation. The main concern is the explicit instruction to install additional third-party skills through the skills CLI, which expands trust beyond this skill and introduces supply-chain risk; LLM data sharing and auto-merge behavior are proportional but still moderately risky for sensitive datasets.