mission-control

SUSPICIOUS: the skill’s core behavior matches its task-coordination purpose, but it routes project/task metadata to a Railway-hosted backend on a personal project domain and enforces autonomous sub-agent execution. No clear credential harvesting or malware behavior is present, yet the external data sink and autonomy pattern make it medium risk.