assumption-stress-test

SUSPICIOUS. The skill’s stated purpose is coherent, but it mandates loading multiple external skills without pinning source or publisher, creating a transitive trust and supply-chain risk. No direct malware, credential theft, or exfiltration is visible in the provided text.