workflow-orchestration

SUSPICIOUS/HIGH-RISK but not confirmed malware. The skill’s purpose is broadly coherent for workflow orchestration, and there is no explicit credential harvesting or third-party exfiltration endpoint. However, it requires numerous unverifiable internal executables/aliases, grants broad autonomous orchestration and shell authority, and combines untrusted-content processing with write/exec-capable subagents. Under the required scoring rules, the unverifiable local CLI/script dependency footprint alone keeps security risk high.