ai-to-tickets-workplan

SUSPICIOUS: the workflow is purpose-consistent for ticket publication, but it relies on an unverified `wp` CLI and a second unverified skill, and it performs autonomous external mutations without another approval step. No direct credential theft or overt exfiltration is shown, so this is not confirmed malware, but the trust chain and opaque binary/backend make it high risk.