stream

SUSPICIOUS. The skill’s core purpose is coherent for repository workflow orchestration, but its footprint is broad: it can execute many local commands, load other unpinned skills, dispatch background agents, and perform git push/deletion actions. Main concerns are transitive skill trust and autonomous repo-affecting actions, not clear malware or credential theft.