task-orchestrator

SUSPICIOUS. The skill is broadly aligned with its stated orchestration purpose and relies on plausible official tools (`gh`, git, tmux, Codex), but it deliberately removes approval friction (`--yolo`) and automates public actions like pushes and PR creation from issue-driven workflows. The main risk is unsafe autonomy and indirect prompt-injection exposure from GitHub issues/tmux output being fed into Codex, not malware or credential theft.