review-recent-sessions

SUSPICIOUS: the skill's purpose largely matches its capabilities, but it relies on partially unverifiable plugin/subagent dependencies and processes untrusted prior transcripts with file-writing agents, creating medium supply-chain and prompt-injection risk. No direct credential harvesting or explicit exfiltration is declared.