load-context

SUSPICIOUS: mostly coherent as a context-loading skill, but its footprint is broader than necessary because it can read arbitrary local paths and import arbitrary remote web content directly into the conversation. No clear malware or credential-harvesting behavior appears, and GitHub API usage is official, but the unrestricted content-loading design creates medium risk through prompt-injection and unintended local data exposure.