orchestration-blackboard

SUSPICIOUS. The skill’s core behavior is coherent with its stated orchestration purpose and appears to use local filesystem-backed sharing rather than obvious exfiltration. However, it relies on unverified custom MCP tools from a non-officially-established server, and the exact implementation and trust boundary of that server are opaque. Risk is medium overall due to install/provenance uncertainty and cross-agent content ingestion, not because of confirmed malicious behavior.