invoke-harness

SUSPICIOUS. The skill is purpose-aligned for delegating to external coding agents, but its core behavior is to run those agents with no sandbox and bypassed permission checks. There is no obvious credential exfiltration or deceptive data routing in the skill text, so this is not confirmed malware, but it is a high-impact delegation pattern that meaningfully expands execution risk beyond normal agent safeguards.