invoke-agent

SUSPICIOUS. The skill’s purpose and capabilities are mostly aligned, but its footprint is broader than a simple reference because it standardizes execution of multiple external AI CLIs with ambient auth and network access. No confirmed malware or hidden exfiltration appears, yet the multi-CLI trust chain, unpinned PATH dependence, and forwarding of user prompts to third-party agent software make it a medium-risk skill.