harvest-loop

SUSPICIOUS: the skill’s purpose broadly matches a self-evolution pipeline, but its footprint is large for an auto-run skill. The main concerns are autonomous repo modification, broad Bash/Write/Agent permissions, and optional forwarding of internal content to external Gemini/Codex CLIs. Install trust for those CLIs is relatively coherent and same-org official, so this is not confirmed malware, but it is a medium-risk self-modifying orchestration skill.