soia-pkm-organize-article-moc

SUSPICIOUS: the stated purpose matches local PKM reorganization, and no clear credential theft or exfiltration is described, but the skill is installed through a third-party transitive skill chain and the documented command grants wildcard permissions. The main risk is trust and scope, not confirmed malicious behavior.