rp-investigate-cli

SUSPICIOUS. The skill’s purpose is coherent for code investigation, but it relies on an insufficiently verified external CLI and forwards substantial repository context into external analysis features. The biggest concerns are install/provenance ambiguity around `rp-cli` and prompt-injection exposure from analyzing untrusted code while retaining exec/write abilities; this is risky but not confirmed malicious.