coding-agent

SUSPICIOUS: the skill's core purpose is coherent, but it grants broad orchestration power to external coding-agent CLIs and encourages high-autonomy repo actions like yolo execution, push, and PR creation/commenting. Main risks are autonomy abuse and prompt-injection through untrusted repo/PR content rather than overt malware or credential theft.