fleet

SUSPICIOUS: the skill’s core behavior is coherent for a local multi-agent orchestrator, and the Linear integration routes to an official API, but it delegates significant power to a localhost fleet service and references an npx package whose provenance is not established here. Main risk is transitive trust and autonomous agent orchestration rather than clear credential theft or malware.