super-pm

SUSPICIOUS: the core PM-routing purpose is coherent, and there is no clear credential harvesting or exfiltration. Risk comes from broad agent permissions, transitive delegation to many other skills, and an optional third-party AnySearch install path whose repo ownership does not match the apparent official publisher.