context-surfing

SUSPICIOUS. The skill's behavior is largely coherent and local-only, with no clear exfiltration or credential harvesting, but install trust is weakened by an unpinned transitive install path and a publisher/repository naming inconsistency that makes provenance harder to verify. Main risk is supply-chain/trust, not malicious functionality.