conductor-new-track

SUSPICIOUS. The core planning and file-generation behavior fits the skill’s stated purpose, but the built-in transitive skill installation flow is high risk: it fetches remote SKILL.md files from unspecified URLs with curl, without pinning, checksum verification, or verifiable publisher linkage. The safety claim about frozen third-party installs is not enforced by the documented command. No direct credential theft or exfiltration is evident, so this is not confirmed malware, but the supply-chain and trust-chain expansion make the skill materially risky.