subagent-runner

SUSPICIOUS: the skill’s core purpose is coherent, but it expands autonomy through parallel subagents, executes a local cached third-party script, depends on an unverified localhost daemon, and includes a concealment-style instruction not to log the operation. No direct external credential theft is shown, so this is not confirmed malware, but the trust and transparency model is weak.