subagent-driven-development

SUSPICIOUS: the skill’s purpose is coherent, but it grants an AI agent broad autonomous code-execution and repo-modification authority over potentially untrusted project content. No clear credential theft, exfiltration, or malicious install behavior is present, so this is not malware; the main risk is powerful delegated execution plus prompt-injection exposure.