pipeline

SUSPICIOUS. The skill's orchestration behavior is broadly consistent with its stated purpose, and the flagged install path uses a legitimate npm-hosted skills CLI with documentation matching the command. However, it instructs the agent to install a separate third-party skill from a personal GitHub repository, extending trust to unreviewed instructions with substantial downstream authority (git, CI, merge automation). No direct exfiltration, credential theft, hidden execution, or off-purpose access is evident in this skill itself, so this is not malware; the main risk is transitive trust combined with high-autonomy workflow control.