karpathy-kb

SUSPICIOUS: the stated purpose is coherent, but the skill meaningfully expands trust through companion-skill orchestration and mixes untrusted web ingestion with broad local write access. It does not show direct credential theft or obvious exfiltration, so this is not confirmed malware; the main concerns are transitive trust and prompt-injection-style contamination of the knowledge base.