council

SUSPICIOUS: the skill’s stated purpose broadly matches its file reads/writes and research behavior, but it relies on an undocumented local `council` executable family with no provenance, version pinning, or release verification. I found no clear credential theft or exfiltration, so this looks more like a supply-chain and trust-boundary problem than confirmed malware.