zcode-subagent

SUSPICIOUS. The skill’s capabilities largely match its purpose, and the named installs are mostly from official or standard sources. The main concern is scope: it enables autonomous coding via a logged-in desktop app, recommends 'Full access', and relies on an unreviewed local helper script to drive another agent and read local app state. This is not clearly malicious, but it is higher-risk than a normal documentation skill and should be treated as a medium-risk delegation/automation skill.