xy-coach

SUSPICIOUS. The core coaching behavior is coherent with the stated purpose, but execution trust and data-flow integrity are weak: the skill runs unverifiable repo-local scripts and can route user context to an unspecified external API in 'OpenAI-compatible' mode. This is not confirmed malware, but it has meaningful supply-chain and credential/data-forwarding risk.