council

SUSPICIOUS. The skill’s core purpose is coherent—multi-model council deliberation—but its footprint is broader than a normal analysis skill because it shells out to multiple external LLM CLIs, reads local agent files, runs a local detection script, and re-injects external model outputs across rounds. The main concern is data-flow expansion and prompt-injection/shell-execution risk, not confirmed malware or credential theft.