anywrite

SUSPICIOUS. The stated purpose matches the capability set and the data flow stays local to the Anytype desktop API, so there is no clear exfiltration behavior. However, the skill’s core dependency is an external compiled CLI from a personal GitHub repository with no clear registry-backed distribution or surfaced release verification, and that binary handles Anytype API credentials from env/local config. That unverifiable-binary-plus-credential-handling pattern creates a high supply-chain risk even though the skill adds some guardrails around absolute paths and local-only API use.