conveyor

SUSPICIOUS. The core workflow is coherent for a scheduler skill and uses official, verifiable tooling, so this is not confirmed malware. However, mandatory use of --dangerously-skip-permissions, transitive skill loading, and autonomous multi-agent code/merge actions make the skill high-risk even though its stated purpose matches its capabilities.