artifact-collection

SUSPICIOUS. The skill’s broad artifact and credential-file access is proportionate to forensic collection, and no clear third-party exfiltration route is disclosed. However, the main implementation and remote agent are not provenance-verifiable from the provided instructions, creating a high supply-chain risk for a skill that would handle extremely sensitive evidence and credentials.