autonomous

SUSPICIOUS. The skill’s main issue is not classic malware behavior but broad autonomous authority: it enables an agent to edit code, open PRs, resolve comments, auto-merge, and possibly deploy with minimal human checkpoints. External prompt references appear same-org and consistent, so supply-chain concern is secondary; the core risk is high-impact autonomous workflow execution combined with untrusted external inputs.