mundi-orch-intent-signal

SUSPICIOUS: the skill is broadly aligned with intent-signal orchestration, but it is high-trust and overpowered. The main concerns are raw credential-file access, transitive execution of other skills, and the ability to trigger CRM/outreach writes through third-party MCP services. No clear malware or deceptive exfiltration endpoint is present.