field-handler

SUSPICIOUS: the core orchestration behavior matches the stated purpose, and there is no clear malware or credential theft pattern. The main risk is transitive trust: this skill depends on installing and invoking a broader third-party skill suite from a personal GitHub repo with wildcard selection, giving external instructions substantial control over local agent actions.