soia-pkm-bootstrap

SUSPICIOUS. The core vault-bootstrap behavior is coherent with the stated purpose, and install sources are partly verifiable and same-ecosystem. The main concern is transitive skill installation—especially third-party skills via `npx skills add`—plus wildcard agent scope and optional persistent config-hook changes. This is not confirmed malware, but it carries medium risk because it expands the agent’s trust boundary beyond simple Obsidian scaffolding.