super-brainstorm

Mostly a legitimate planning/workflow skill with proportionate repo-reading and spec-writing behavior. The main concern is the companion-skill check that reads local skill directories and recommends installing another skill via `npx skills add`, introducing transitive trust and moderate supply-chain risk. Overall suspicious rather than malicious.