regulatory-submissions

SUSPICIOUS. The core audit/report behavior is broadly aligned with the stated purpose and shows no external credential routing or gateway transmission, but the skill is more autonomous than necessary, writes optional telemetry to a non-verified Claude path, and recommends executing additional undefined slash commands that create transitive trust risk. This is not confirmed malware, but it is a medium-risk skill due to autonomy and unverifiable downstream command references.