external-pattern-integrator

SUSPICIOUS: The skill’s purpose mostly matches its capabilities, but it fetches arbitrary external content, lets that content shape local file edits, runs local commands, and performs git commits. No clear credential theft is present, yet the combination of untrusted-content ingestion, write/exec capability, and undocumented backlog-script execution makes this a medium-risk workflow skill rather than a benign read-only integrator.