decompose-workflow-skill

SUSPICIOUS: The skill’s capabilities mostly fit its stated purpose, and there is no direct credential theft, exfiltration, or malware behavior in the provided text. However, it has medium security risk because it delegates core work to other unspecified skills/capabilities, creating an underspecified transitive trust chain with repository-writing power.