conductor-review

SUSPICIOUS: the skill’s purpose mostly matches a code-review assistant, but it has moderate security risk because it auto-executes inferred test commands from arbitrary repositories and relies on unverifiable transitive conductor skills. No clear credential theft, remote exfiltration, or malicious installer behavior is visible in the supplied content.