vibekanban

SUSPICIOUS. The skill is purpose-aligned and mainly uses official distribution channels, so it does not look like credential harvesting or covert exfiltration. However, it is a high-impact orchestration skill that normalizes autonomous agent execution with skipped permissions, full-access sandboxes, script execution, PR actions, and optional copying of sensitive files into worktrees; those capabilities are coherent with its purpose but materially raise operational risk.