aha-opencode-omo

SUSPICIOUS: the skill’s purpose is coherent, but it broadens autonomous delegation across many installed surfaces and recommends transitive installation/update from a mutable third-party GitHub repo via the skills CLI. No direct credential theft, exfiltration, or malicious execution is evident, so this looks more like medium supply-chain and orchestration risk than malware.