workflow-verification

SUSPICIOUS: the skill’s stated workflow purpose is plausible, but it is an opaque orchestrator that compels a long sequence of downstream commands with likely read/write/test capabilities and no clear per-action approval. There is no direct credential theft or exfiltration shown, but the unspecified slash-command runtime and broad autonomous execution make the skill medium risk.