vault-fetch

SUSPICIOUS. The skill’s behavior broadly matches its purpose, but it depends on an unverified `vault-cli` binary and automatically persists externally fetched content across sessions. Main concern is install/execution trust and opaque data handling by the CLI, not confirmed malicious behavior.