gds-agent-tech-writer

SUSPICIOUS: mostly coherent with a BMAD-style persona skill, but it grants command execution through configurable activation steps and project-local scripts, which is broader than a pure technical-writing skill needs. No direct credential harvesting, remote install, or explicit exfiltration is shown, so this is medium risk rather than confirmed malware.