super-pm

SUSPICIOUS. The skill is not overtly malicious and shows no credential theft or network exfiltration, but its core function is to compel delegation to many unverified downstream skills and continue multi-step workflows automatically. Risk is mainly transitive trust and moderate autonomy expansion, not confirmed malware.