erne-worker

SUSPICIOUS: the skill’s stated purpose matches its capabilities, but it enables high-autonomy software changes driven by untrusted ticket content and external provider data, then performs write/exec actions and PR creation. The main risk is autonomous action and prompt-injection exposure rather than confirmed malware or credential theft.