kero-method

SUSPICIOUS. The skill's design-orchestration purpose is coherent, and it does not directly request credentials or route data to attacker endpoints. The main risk is transitive trust: it instructs installation/loading of multiple external skills, some same-publisher and some third-party, which expands the agent's effective permission surface without independent review.