sift-drain

SUSPICIOUS. The core backlog-orchestration behavior is coherent and mostly local-only, with clear prohibitions on external tracker writes and pushes. The main risk is proportionate but significant: the skill executes an arbitrary user-configured external review harness via `sh -c`, giving that tool repo visibility and broad local execution power; this raises security risk even though it is aligned with the stated review purpose and there is no direct exfiltration logic in the provided code.