grep-plan

SUSPICIOUS. The skill’s behavior mostly matches its stated purpose, but it exports substantial local project context to a third-party GREP service and then feeds untrusted external research back into the agent. No clear malware signals or deceptive installer behavior appear in this file, yet the data-sharing and external-content trust model make it a medium-risk skill.