doc-daily-digest

SUSPICIOUS: the skill's core note-digest purpose is coherent, and the cited install sources appear legitimate, but its effective footprint is broad. It combines transitive skill orchestration, arbitrary external content ingestion, optional stealth scraping, local note editing, and keychain-based credential checks. This is not confirmed malware, but it poses meaningful security risk from supply chain expansion and indirect prompt-injection/data-handling exposure.