ship-roadmap

SUSPICIOUS. The skill is broadly coherent with a roadmap autopilot and uses official GitHub data flows, but it expands trust by instructing installation of another skill set and can perform autonomous repository actions, including optional merges through an unreviewed local wrapper. No clear credential harvesting or deceptive exfiltration appears in the provided text.