mojo

SUSPICIOUS: the core MOJO lookup behavior is coherent, but the skill delegates authority to runtime-fetched markdown from a configurable host and uses a disk-stored secret against that host. There is no clear malware or supply-chain payload, yet the remote-instruction pattern and configurable endpoint create medium security risk.