todo-task-run

The skill has no evident credential harvesting, external data routing, download-execute behavior, or obfuscation. Its primary security concern is high-autonomy execution of arbitrary tasks from a user-provided TODO file, including delegated file modifications, with weak per-action approval safeguards.