workflow-orchestrator

SUSPICIOUS: the skill's stated orchestration purpose matches its behavior, but it meaningfully amplifies risk by chaining arbitrary skills, encouraging installation of additional skills, and enabling scheduled automated actions. No direct exfiltration or credential harvesting is shown here, yet the transitive trust and prompt-injection surface make it medium-to-high risk.