agent-eval

SUSPICIOUS: The skill’s core behavior matches its stated purpose, but it executes arbitrary judge commands and routes code/prompts through third-party coding agent CLIs. The main concerns are shell execution from task definitions and external-agent data exposure, not clear malware or overt credential theft.