auto

SUSPICIOUS: the skill’s stated purpose matches its behavior, but it deliberately removes approval gates and enables autonomous execution and PR follow-up based on inferred context. There is no direct evidence of malware, credential theft, or remote payload execution in this snippet, yet the autonomy and transitive trust in other manifest-dev skills create meaningful operational risk.