soia-dev-officecli-ops

SUSPICIOUS: the Office document inspection/editing behavior is largely coherent and locally scoped, with no obvious credential harvesting or exfiltration. The main concerns are install trust and scope: a third-party skills CLI, transitive skill installation, wildcard/global agent targeting, and weakly verified publisher ownership make the delivery path riskier than the skill’s stated Office-only purpose warrants.