wiki-brain

SUSPICIOUS. The skill is broadly aligned with a local wiki/memory workflow and does not show explicit credential theft or exfiltration, but it combines unpinned third-party installation, automatic hook persistence, arbitrary URL ingestion, and write-capable processing of untrusted content. That footprint is somewhat larger than a simple note-taking skill and merits caution, though it is not confirmed malicious.