write-plan-consult

SUSPICIOUS: the capability matches the stated planning purpose, but the skill intentionally routes local code/context to external LLMs through a third-party MCP layer and likely depends on extra credential-handling tooling. This is not confirmed malware, yet the data-flow and install-trust footprint are broader than a simple planning skill and warrant medium risk treatment.