to-spec

SUSPICIOUS: the skill’s core function is coherent, but it enables autonomous external posting and labeling, and it references additional setup/skills without defining trust boundaries. No direct malware or installer behavior is present, but the external action scope is significant enough to warrant caution.