k2f-invoice

SUSPICIOUS. The invoice behavior is coherent and non-malicious on its face, but the skill instructs the agent to install a separate third-party skill from a personal GitHub account, expanding trust beyond the reviewed content. Because this is a transitive skill installation rather than direct exfiltration or credential harvesting, the main concern is supply-chain and inherited-permissions risk, not confirmed malware.