herdr

The skill is coherent with its stated Herdr orchestration purpose and uses an apparently official install path, so it is not malware. However, it carries meaningful security risk because it can remotely drive other agent panes and explicitly recommends auto-approved worker launches, which can enable unattended real actions across multiple agents.