work-on

SUSPICIOUS. The skill’s purpose broadly matches software-delivery orchestration, but it has meaningful autonomous repo-action scope and relies on transitive skills not provided for review. No clear credential theft or malicious exfiltration is visible in this text, so risk is driven by broad automation and dependency trust rather than confirmed malware.