harness-executor

SUSPICIOUS: the core behavior matches a development-executor skill, but the footprint is high-trust. Main concerns are autonomous repo modification/execution, runtime verification with server startup, and automatic transitive installation/loading of harness-creator from a personal-publisher trust chain. No clear credential theft, covert behavior, or exfiltration endpoint is shown.