luke-mode

SUSPICIOUS. The flagged command-injection and credential-access patterns are mostly documentation false positives, and the stated capabilities broadly match the skill's orchestration/setup purpose. Risk comes instead from transitive installation of external skills and autonomous external actions in autopilot (push/open PR, publish evidence), which are powerful and only partly bounded by user authorization language.