ai-do

SUSPICIOUS. The skill’s main behavior is coherent with a router/orchestrator role, and it does not show credential theft or overt exfiltration. However, it materially expands trust by directing transitive installation of other skills and by ingesting remote GitHub markdown before writing prompts, so the overall risk is medium even though intent appears benign.