time-machine

SUSPICIOUS: the stated purpose is benign and the visible skill is minimal, but it delegates execution to an unverified spawn-agent dependency and advertises full MCP tool access for the subagent. No direct malware or exfiltration is shown here; the main concern is transitive trust and broad delegated capability without provenance or scope controls.