company-osint

SUSPICIOUS: The core OSINT workflow is coherent with corporate due diligence and mostly points to legitimate public sources, so there is no clear malware or exfiltration behavior in this artifact. The main risk is transitive: it instructs the agent to run numerous unverified other skills, expanding trust and permissions beyond what can be assessed here; combined with sensitive recon steps, this makes the skill medium risk overall.