harness-loop

SUSPICIOUS: the skill’s purpose largely matches its capabilities, but it grants an autonomous orchestrator broad write/exec authority, processes untrusted agent-generated content, and can create commits/PRs in headless bypass-permission mode. This is not confirmed malware, but it is a high-impact automation skill with meaningful operational and security risk.