spawn-ori-eval

SUSPICIOUS. The purpose is coherent for an eval skill, but the trust model is weak: it installs a remotely scripted, non-registry CLI and then forwards credentials and repo-derived data into that external binary. Given the limited provenance evidence for `ori`, this creates high supply-chain and credential-forwarding risk even without proof of malicious exfiltration.