coding

SUSPICIOUS: the visible skill is mostly coherent for development orchestration and does not itself show credential theft, exfiltration, or external installs, but it expands risk through mandatory multi-agent execution, markdown-driven prompting, and a transitive handoff to an unreviewed local auto-browser skill. Risk is medium due to indirect prompt-injection exposure and hidden downstream behavior, not confirmed malware.