toolkit-scout

The skill’s stated purpose as a toolkit index is mostly consistent with its content, but it expands trust to many external and local executables. The main risk is transitive: it instructs the agent to run unverifiable local scripts and route into other powerful workflows, including deployment, account-cookie refresh, outreach automation, and LinkedIn actions via Unipile. This is not confirmed malware, but it is a medium/high-risk coordination skill because its effective footprint is much broader than a passive reference document.