polis-protocol

SUSPICIOUS: the skill’s capabilities broadly match its orchestration purpose, but it executes community-published code that writes agent-facing files and coordinates multiple agents through shared markdown. The main concern is supply-chain and indirect agent-control risk, not confirmed malware or credential theft.