validate-idea

SUSPICIOUS: the top-level purpose is coherent, but trust is under-specified because essential work is delegated to external subskills with ambiguous provenance and undeclared downstream data flows. No direct malware, credential theft, or hidden execution is shown in this file, but the unresolved transitive dependency boundary raises medium security risk.