monitor-codebase

SUSPICIOUS: The stated purpose matches codebase monitoring and remediation, and no clear credential theft or malicious exfiltration is present. Risk comes from autonomous fix dispatch, recursive composition into many unseen skills, and prompt-injection exposure from scanned code plus external research, making the overall footprint higher-risk than a simple monitoring skill.