team-level

SUSPICIOUS. The skill's overall behavior fits its stated level-design orchestration purpose and shows no credential theft, external exfiltration, or third-party proxying. However, it contains a load-time pre-execution shell command that runs a repo-local helper script whose contents are not provided, creating a significant trust and review gap even without evidence of overtly malicious behavior.