vault-capture

SUSPICIOUS. The purpose is coherent—saving important memories—but the trust chain is not: the skill forwards user/project content to an unspecified external `vault-cli` with unclear provenance, ambiguous ownership, and command syntax that does not cleanly match the most plausible public implementation. No clear evidence of confirmed malware or overt credential theft, but the undocumented third-party CLI dependency and unknown data destination make the skill higher risk than a normal note-taking helper.