ghostwriter-oplog

SUSPICIOUS: the core behavior is broadly consistent with an operation-log skill, but it can read arbitrary local files and send them through an external MCP server whose provenance and final network endpoint are not fully verified here. Risk is driven more by opaque intermediary trust and potential evidence exfiltration than by overtly malicious behavior.