piv

SUSPICIOUS. The skill is broadly aligned with its stated orchestration purpose and shows no direct credential theft, exfiltration endpoint, or remote download-execute chain. Main concerns are weaker publisher provenance, autonomous code/commit actions, and prompt-injection exposure from passing project content into sub-agents with write/exec capabilities.