summon

The skill’s orchestration purpose is coherent, but unattended execution, automatic resumption, delegated skills with unreviewed instructions, and optional PR merging create meaningful risk if external content or a delegated skill is compromised. No direct credential theft, exfiltration endpoint, or malicious payload is evident in the supplied text.