oma-orchestrator

SUSPICIOUS: the skill’s orchestration behavior matches its stated purpose, but its footprint is high risk. The main concerns are autonomous parallel subagent execution, processing of untrusted workspace/review content with write/exec access, and reliance on a third-party fallback CLI whose official installation includes unsafe raw GitHub installer patterns. This is not confirmed malware, but it is a high-risk automation skill.