workflow-visualize

SUSPICIOUS: the stated purpose is coherent, but the skill is a thin wrapper around opaque slash-command workflows that may ingest untrusted web/codebase content and act on it without clear boundaries. No direct credential harvesting or malicious payload is shown, yet the hidden delegated behavior and mandatory sequential execution make the overall risk medium rather than benign.