backlink-audit

SUSPICIOUS because the visible skill is only a wrapper and the real workflow is hidden in a referenced local SKILL.md, so purpose appears plausible but core capabilities, permissions, and data flows cannot be verified. No confirmed malware indicators are visible in this fragment, but the delegated-file design and medium-trust install chain justify a medium security risk.