go

SUSPICIOUS: the skill is not overtly malicious, but its broad mission, automatic progression into execution, transitive reliance on deferred MCP tools, and unnecessary Bash permission make its footprint disproportionate to a 'pure routing' orchestrator. Main risk is autonomy and scope creep rather than confirmed exfiltration or malware.