trajectory-packs

SUSPICIOUS: the stated purpose matches session export, but the footprint is broader than necessary because it requires transitive installation of three skills from a personal GitHub repo and enables unattended external data export. No direct credential exfiltration or hidden network sink is shown here, but the trust chain and reduced-approval path make this a medium-high risk skill.