goal-driven-workflow

SUSPICIOUS: the core workflow purpose is coherent, and the Claude `/goal` usage matches official docs, but the skill introduces medium risk by instructing transitive installation of strong dependencies from a third-party GitHub-backed skills source and by enabling extended autonomous execution. The autonomy is partially bounded by approval and budget gates, so the main concern is transitive trust and install provenance rather than confirmed malicious behavior.