building-mvp

SUSPICIOUS: the stated purpose matches orchestration, but the skill's main mechanism is installing and chaining many external skills from a personal GitHub source. This transitive trust is disproportionate to a single skill and creates substantial supply-chain risk even without direct evidence of credential theft or malware.