amem-discord

SUSPICIOUS: the skill’s purpose mostly matches its behavior, but it asks the agent to source a broad local `.env` file and then trigger external Discord notifications through local same-org tools. That is more access than strictly necessary for simple progress reporting, and it creates a real outbound data path, so the overall risk is medium rather than benign.