agent-swarm

SUSPICIOUS: the skill is coherent with its stated purpose and uses official tooling, so it does not look malicious or like a credential harvester. The main risk is proportional but significant autonomy: it orchestrates multiple agents that ingest untrusted issue/comment content while able to modify code, control terminals, open PRs, and merge changes.