workflow-rig

SUSPICIOUS: the skill is mostly aligned with its stated workload-orchestration purpose, but it grants a high-impact autonomous execution path: durable jobs, shell/file-editing agents, and authenticated git push from a worker environment. The main concerns are broad runtime authority and mounted credentials, not clear malware or explicit exfiltration.