two-claude-relay

SUSPICIOUS. The skill is coherent in purpose and uses mostly official tooling, so it is not overt malware. However, its core function is to let an AI agent act autonomously with dangerous no-prompt execution and the ability to create, review, and merge code changes unattended, which creates high operational and security risk.