suede-ship

SUSPICIOUS. The skill is largely aligned with its stated purpose of orchestrating a heavy repo-change workflow and shows no explicit credential harvesting, third-party API proxying, or remote installer behavior. However, it grants a high degree of autonomous code-editing and test-running authority to a very large subagent fan-out, and it combines untrusted external research inputs with write/exec capability, creating elevated prompt-injection and operational risk.