openviking

SUSPICIOUS: the skill’s repo-search purpose broadly matches its commands, but its footprint is wider than a simple search helper. The biggest issue is indirect prompt-injection risk from indexing and reading untrusted external repositories while the agent also has shell access, plus some automation of installs/server start. No clear credential harvesting or malicious exfiltration is shown.