wormhole

SUSPICIOUS: the skill’s core behavior is coherent with a federated query tool, but its documentation understates outbound data flow and its dependency on the unofficial `maw` transport has only medium provenance. Risk is mainly from sending prompts and local identity to remote peers and from the broader remote-action potential implied by the trust model, not from confirmed malware.