colosseum-copilot

SUSPICIOUS: The main Copilot functionality is coherent and uses official Colosseum APIs, but the skill also performs opt-out telemetry and routes it through a configurable non-Colosseum `convexUrl`. That indirect data flow and pre-consent telemetry make the footprint broader than necessary for a search/analysis skill, though there is no strong evidence of malware or credential theft.