quote-automation

SUSPICIOUS. The core quote-analysis/report-writing behavior is broadly aligned with the stated purpose and shows no external installer or exfiltration path, but the skill exceeds pure repo analysis by touching ~/.claude project memory and by recommending execution of other unverified slash commands. Risk is driven more by autonomous local actions and transitive trust than by confirmed malicious behavior.