workflow-big-feature

SUSPICIOUS: the skill's stated purpose matches a workflow orchestrator, but its footprint is broader than a single skill because it forces execution of many transitive skills and likely mixes untrusted web research with later code-writing actions. No direct credential harvesting or malicious exfiltration is shown, but the transitive-trust and prompt-injection exposure make it medium risk.