team

SUSPICIOUS: the skill's capabilities mostly match its purpose as a tmux-based multi-agent operator runtime, and install trust is not the primary issue. The main risk is proportionality and execution trust: it grants an AI agent durable multi-session shell control, local git mutation, destructive cleanup paths, and even permission-bypass behavior, which makes it a high-risk operational skill even without clear evidence of malware or exfiltration.