dome

SUSPICIOUS. The skill’s stated purpose is plausible and mostly read-only, but its actual operation depends on an unverified `orth` CLI and intermediary service path that could not be tied to an official same-org source. No direct credential theft or overtly malicious behavior is shown, but the unverifiable binary requirement makes this high security risk.