autonomous-agent

SUSPICIOUS: the skill’s core problem is not explicit malware but unsafe autonomy. Its stated purpose matches autonomous orchestration, yet it combines silent operation, web research over untrusted sources, and execution of externally derived fixes without provenance controls. That makes the skill high risk for unintended actions and indirect prompt-injection, even though no explicit credential theft or concrete malicious payload is shown.