legal-cog

SUSPICIOUS rather than benign: the core behavior is coherent with AI legal drafting, but the skill is mainly a thin wrapper that tells the agent to install and trust another skill, and it routes sensitive legal content to a third-party cloud service. Install provenance appears legitimate, so this is not confirmed malicious, but the transitive trust chain and legal-data exposure make it a medium-risk skill.