learnings

SUSPICIOUS: the stated purpose is coherent and the visible data flows are mostly local, but the skill’s core behavior depends on an unverifiable local executable script with no provenance or release trail. That makes the main risk supply-chain and execution trust rather than confirmed maliciousness.