vibe-legal-batch-redliner

SUSPICIOUS. The skill is internally coherent for batch contract redlining, but its footprint carries medium risk: full contracts are sent to Google Gemini, and installation relies on an unpinned personal GitHub repository. The data flow is transparently disclosed rather than hidden, so this is not confirmed malware, but it is not low-risk enough to treat as benign for sensitive legal use.