consult-shadowing-scheduler

SUSPICIOUS: The business workflow and requested accesses are largely coherent for scheduling and admin follow-up, with explicit user gating and draft-only email reducing abuse risk. The main security issue is transitive trust: it installs another skill from a GitHub repository, extending trust to unreviewed instructions that may access the agent's connected systems.