tcrdd

SUSPICIOUS. The skill's git/test capabilities fit its stated TCRDD purpose and it introduces no external installers, credentials, or off-platform data flows. The main risk is proportional but material: autonomous mode weakens approval gating and allows destructive local actions (`git add -A`, `git reset --hard`, commits, repo-defined test scripts) that can modify or discard work without per-action confirmation.