afk-pipeline

SUSPICIOUS: the skill is broadly coherent with its stated CI/pipeline purpose, but it has a large trust footprint. The main risks are credential forwarding from local auth files into GitHub secrets, execution on remote runners, and transitive installation of another skill. No clear evidence of credential theft or covert exfiltration to unrelated endpoints was found, so this is not confirmed malware, but it is a high-trust operational skill that should be used only in tightly controlled repos.