ws-workflow-engine-bridge

SUSPICIOUS: the skill's core purpose is coherent, and there is no installer or obvious credential-harvesting path, but it executes externally authored prompt workflows with access to rich AuthorClaw context and file writes. The main risk is indirect prompt injection and unintended disclosure of project data through model routing, not confirmed malware.