horde-worker

SUSPICIOUS: the worker-coordination behavior, token scope, path claims, and messaging are proportionate to the stated purpose, and the data flow stays within the described Horde coordination model. The main risk is trust: the skill requires an unverified horde CLI/MCP bridge and instructs passing a worker token to it, which materially raises supply-chain and credential-forwarding risk even without evidence of overtly malicious behavior.