grilling

SUSPICIOUS: the core behavior is coherent with a decision-memory workflow, but the skill sends user-derived data to a repo chosen by `DECISION_MEMORY_URL` and imports instructions from that external repo, creating moderate exfiltration and prompt-injection risk. No evidence of malware, credential theft, hidden execution, or unverified binary installation was found.