dynamic-skill-dispatcher

SUSPICIOUS: the skill's orchestration purpose matches its capabilities, but its actual trust and data-flow boundaries are too loose. The main risks are underspecified forwarding of context to dynamically selected external AI/MCP targets and unverifiable provenance for the dispatcher implementation itself, not confirmed malware.