edi-remittance

SUSPICIOUS: the stated purpose is narrow and plausible, but the actual footprint is wider than expected because it requires installing/loading third-party hedwigai skills/plugins and potentially sending sensitive remittance data through a remote MCP-backed shell and external `edi` program. The main concerns are transitive trust and unclear data handling, not confirmed malware.