plan

SUSPICIOUS: The core purpose is coherent for a planning/orchestration skill, and there is no clear malware, credential theft, or hostile data routing. Risk comes from trust expansion: it invokes private local helpers, composes other skills, may auto-trigger hidden-test tooling, and instructs the agent to run and monitor orchestration rather than only draft plans. This is best classified as medium-risk but not malicious.