drive-tick

SUSPICIOUS: the skill’s capabilities mostly fit its stated purpose as an autonomous drive-loop tick, but its footprint is high-risk because it processes untrusted PR/inbox content while retaining authority to edit code, push commits, post replies, and recursively continue work via delegated internal skills. No clear malware or external credential-harvesting path is present in this fragment, and no remote installer is specified.