council

SUSPICIOUS. The workflow mostly matches its stated purpose, but it relies on an unverifiable `council` CLI and combines untrusted web research with multi-agent local file writes. There is no clear credential harvesting or exfiltration behavior, but install trust and external-content-to-write-action risk are high enough to warrant caution.