megadev-release

SUSPICIOUS. The skill’s purpose and capabilities are mostly coherent for release engineering, and there is no clear credential harvesting or exfiltration path. The main issue is install/execution trust: it instructs the agent to pull and run an unpinned remote Docker image whose publisher relationship to the upstream Megadev project is not clearly verified by the provided evidence. The scanner’s command-injection hit appears to be benign documentation, and the autonomy-abuse flag is unsupported by the visible text.