vos-authoring

SUSPICIOUS: the skill is mostly coherent with its stated purpose and uses official npm packages and official vos.so endpoints, so it is not malicious. However, it directs the agent to read a local credential file and to upload generated work plus the user's original prompt to a remote service by default, which makes the data handling broader than a purely local authoring skill.