sori-recorder

SUSPICIOUS. The skill’s stated purpose and local recorder controls are internally coherent, and the documented data flow is restrained and approval-based. However, it depends on a preinstalled `sori` binary whose provenance could not be publicly verified, which creates a significant supply-chain trust gap even though there is no direct evidence of credential theft, exfiltration, or malicious intent in the skill text itself.