coordinator

SUSPICIOUS: the skill is internally aligned with a repo-workflow coordinator, but it has meaningful security risk because it can autonomously modify repos, push branches, create PRs, and delegate to other skills. No clear credential theft, exfiltration, or malicious mismatch is present; the main concerns are transitive trust, external side effects, and moderate indirect prompt-injection exposure.