heartbeat-processor

SUSPICIOUS. The skill's capabilities generally match a proactive scheduler, but it normalizes silent autonomous execution, suppresses user confirmation, and can fetch untrusted web content while scheduling follow-up tasks. There is no clear malware behavior, credential harvesting, or supply-chain payload, but the autonomy and concealment directives make it a high-risk orchestration skill.