create-code

SUSPICIOUS: the stated purpose matches a coding orchestrator, but the footprint is broader than a simple workflow skill because it combines external research, Bash execution, opaque sub-skills, and optional offensive-security tooling. No clear credential theft or malicious exfiltration is shown, but the transitive-skill and prompt-injection exposure make this higher-risk than a normal documentation/workflow skill.