mundi-orch-board-materials

SUSPICIOUS: the overall workflow mostly matches the stated purpose, but it has meaningful data-exposure risk by uploading sensitive board materials to Gemini, reads extra local memory beyond the data room, and relies on an adapted local script/plugin chain whose provenance is not established here. No evidence of credential harvesting, covert exfiltration to attacker infrastructure, or pre-execution malware.