stelow-workflow-scope-executor

SUSPICIOUS. The skill's capabilities broadly match its stated purpose as a workflow executor, so this is not confirmed malware. However, it grants an AI agent substantial autonomous authority to read project state, run shell commands, mutate tracking files, delegate code-writing subagents, and continue execution with limited human checkpoints; that makes it a high-risk orchestration skill even without clear exfiltration or hidden payloads.