executing-plans

SUSPICIOUS. The skill’s purpose is coherent, but it delegates execution to plan content and required sub-skills, creating moderate transitive-trust and prompt-injection risk. No direct credential harvesting, exfiltration endpoint, or malicious installer appears in the provided skill text.