autonomous-delivery

SUSPICIOUS. The skill's capabilities largely match its stated purpose as a delivery orchestrator, and there are no installers, credential-forwarding steps, or off-platform data exfiltration paths in the provided text. The main risk is proportionality and autonomy: it is designed to keep itself and child sessions running for hours or days, silently resume work, and potentially merge/deploy with limited user interaction if prior authorization exists. That is a real operational-risk skill, not clear malware, but the reduced user visibility and autonomous real-world actions make it medium risk.