read-memories

SUSPICIOUS: The skill’s core function is coherent, local, and has no supply-chain or network exfiltration risk, but it normalizes hidden behavior and broad cross-project access to prior conversation logs. The main concerns are stealth, oversized data access, and the possibility of prior-log prompt contamination, not malware or credential theft.