mols-kanban-markdown

Suspicious rather than malicious. The main concern is not exfiltration or installers, but that the skill lets untrusted repository content in AGENTS.md define the agent’s behavior, which is disproportionate for a simple Kanban router and creates prompt-injection risk.