tracer-dev

SUSPICIOUS: the core repo-editing and validation behavior fits a development skill, and there is no malware-like installer or credential harvesting pattern. The main risk is the background-agent step routed through OpenRouter, which can expose repository context to a third-party model gateway while also enabling autonomous commits and state changes.