batch

SUSPICIOUS: the skill's purpose matches batch code orchestration, but it grants agents high-impact autonomy to push branches and open PRs at scale, and it chains into another skill. No clear malware or credential-exfiltration behavior is present; the main risk is operational and trust-boundary expansion rather than deceptive data flow.