org-deps

SUSPICIOUS. The stated purpose is coherent, but the skill materially depends on an opaque local helper script outside the skill package boundary. That unverifiable executable is disproportionate from a trust perspective even though the visible workflow itself looks like a normal dependency audit.