cc10x-router

SUSPICIOUS: the skill’s capabilities mostly fit a workflow-orchestration purpose, but its footprint is broad: immediate execution, persistent hidden state, transitive sub-skill orchestration, and optional ingestion of untrusted external research that can shape later write actions. No direct credential theft, malware payload, or deceptive exfiltration endpoint is present, so this is not confirmed malicious; the main risk is overbroad autonomous orchestration and indirect prompt-injection via research backends.