sim-conductor

SUSPICIOUS. The core simulation/audit behavior aligns with the stated purpose, and the scanner's command-injection hits are false positives. The main risk is scope: the skill can autonomously modify code and commit/push results, and it can chain into other agents/skills or external contexts, which is powerful for an orchestrator but materially increases trust and approval risk.