power-iterate

SUSPICIOUS: The skill is internally coherent and has no meaningful supply-chain, credential, or exfiltration indicators, but it intentionally grants broad autonomous action without user confirmation. The main risk is autonomy abuse in real project environments, not malware or credential theft.