discovery

SUSPICIOUS: The skill is mostly coherent with its stated discovery-capture purpose and uses plausible official/same-author services, but it expands into background content fetching, repo cloning, Vault writes, and possible public sync. The biggest concerns are partial provenance for the custom `joelclaw` CLI, autonomous event firing/publication behavior, and untrusted-content processing in downstream workers rather than direct evidence of malware or credential theft.