factory

SUSPICIOUS. The core workflow and GitHub/Linear access are broadly consistent with a factory/orchestration skill, and I found no direct credential exfiltration or obviously malicious endpoints. However, run mode is very powerful, the skill chains into other stage skills with broad real-world effects, and it includes transitive skill installation via an unpinned `npx skills add` flow. That makes the skill medium risk even though it is not confirmed malware.