prospect-panel-simulator

SUSPICIOUS. The stated purpose is benign and mostly aligned, with no installer or credential-forwarding behavior, but the tool scope is broader than the claimed read-only workflow and the skill can ingest arbitrary web content while retaining write/exec/agent capabilities. Main risk is overbroad permissions and transitive/indirect prompt-injection exposure, not confirmed malicious behavior.