supercharge

SUSPICIOUS: the core repo-scanning and refactoring behavior is broadly aligned with a code hygiene skill, but it delegates to unverified custom skills (/superplan, /superbuild) and combines untrusted code analysis with write/exec capabilities, creating medium transitive-trust and prompt-injection risk. No clear credential theft, exfiltration, or malware behavior is present.