ralph-deep-planner

SUSPICIOUS: the skill’s overall purpose is coherent, but it delegates core behavior to unprovided local executables and auxiliary tools, then allows semi-autonomous iterative code changes and commits after a single approval. I see no strong evidence of credential theft or malicious exfiltration, but the unverifiable execution chain and broad automation make the risk meaningfully above benign.