case-study-writing

SUSPICIOUS: the skill’s writing/research purpose is mostly coherent, but its footprint is broader than necessary. Main concerns are transitive skill installation, broad `Bash(belt *)` permission, authenticated dependency on an external CLI, and untrusted web research flowing into an agent that can execute commands. Same-org branding reduces the chance of outright malware, but install trust and data-flow scope are only moderately controlled.