writing-plans

SUSPICIOUS: The core planning behavior is coherent and mostly local, but the mandated handoff to unreviewed third-party skills introduces a meaningful transitive trust risk. No direct credential theft, exfiltration, or malicious payload behavior is present in this skill itself.