pipeline

SUSPICIOUS: the core purpose is coherent, but the skill grants disproportionate execution power for a pipeline runner by directing spawned agents to bypass permissions and by executing arbitrary local workflow instructions and referenced skills. No strong evidence of malware or credential theft, but autonomy and transitive action surface make it a medium-high security risk.