agent-factory

SUSPICIOUS. The core GitHub/Railway deployment flow is coherent, but the optional Bird/X step is not: it uses browser-session-style credentials with an ambiguously sourced CLI, creating disproportionate credential-forwarding risk. Automated public repo creation and recurring deployment add meaningful real-world action risk.