aris-grant-proposal

SUSPICIOUS: The core behavior fits a grant-writing skill, and external data flows are mostly proportionate and routed to expected destinations. Risk comes from broad Bash/Agent permissions, transitive installation/use of other skills, optional outbound sharing of full proposal text to OpenAI, and minor concealment language around silent Bash fallback and notifications.