watch

SUSPICIOUS. The core video-analysis behavior is coherent, and network calls go to expected providers, but the skill overreaches by pre-staging content into the user's Obsidian vault before consent and by delegating write-capable behavior to external instructions in $VAULT_DIR/CLAUDE.md. This is not confirmed malware, but it has meaningful autonomy and prompt-injection risk.