assimilate

SUSPICIOUS. The core purpose is coherent, and the skill includes meaningful safeguards against executing external code, but it combines untrusted external-content ingestion with Bash, Write, Web access, and Skill capabilities. The main risk is indirect prompt injection and transitive trust expansion, not confirmed malware or credential theft.