defect-detection

SUSPICIOUS: mostly coherent as a local QC audit skill, with no external downloads, credential handling, or off-host exfiltration. Risk comes from broad autonomous repo inspection, undocumented local telemetry persistence, and especially the suggested invocation of other unspecified skills/commands, which creates transitive trust without provenance.