autopilot

This skill is broadly aligned with its stated purpose: an autonomous internal workflow orchestrator for planning, coding, and review. The main concern is not malware or credential theft, but the deliberate autonomy: it loops over untrusted task content and can drive code-changing phases with limited user checkpoints, so the overall classification is suspicious-to-medium risk rather than malicious.