pythia-conventions

SUSPICIOUS: the stated purpose is coherent and the skill does not explicitly seek secrets or exfiltrate data, but it depends on a `pythia` CLI whose provenance cannot be verified from the skill or supporting evidence. That unverifiable binary requirement makes the skill high risk even without confirmed malicious behavior.