agent-relay-orchestrator

SUSPICIOUS. The skill’s core behavior matches its orchestration purpose and uses mostly official distribution paths, so this is not confirmed malware. However, it expands trust to multiple external CLIs, uses unpinned `npx @latest`, references a separate `mcporter` tool, and enables autonomous parallel agents with apparent permission bypass, making the overall footprint medium risk.