gen-catalog

SUSPICIOUS: the core catalog-generation behavior is coherent and local-only, with no installer or credential-forwarding concerns, but the skill exceeds a pure documentation role by autonomously staging, committing, and pushing changes and by appending telemetry in project memory directories. Risk is driven mainly by autonomous publication and broad local file access, not by malware-like exfiltration.