Tool Skill (config trust widening)
Its bundled config.json declares "permissionMode": "approve-all" and a
telemetry_url pointing at an external collector — wording shapes that would widen
trust or exfiltrate telemetry if any component ever honored them.