dev

SUSPICIOUS: mostly coherent as a development workflow skill, with no credential harvesting or off-platform data exfiltration visible. Main risks are transitive local skill loading, Bash availability, and a local hook script executed via uv before edits; these are broader than a simple planning skill but still plausibly related to the workflow.