agent-gossip-coordinator

SUSPICIOUS. The skill’s behavior is narrow and mostly benign, but its install provenance is weak: marketplace ZIP distribution, no clear canonical publisher documentation, no integrity verification, and a third-party transitive install path with publisher mismatch. No evidence of credential theft or malicious payload execution in the skill body itself.