tasks-generator

SUSPICIOUS: the core task-generation behavior is coherent and there is no external installer or obvious credential harvesting, but the skill is overpowered for its purpose because it mandates autonomous commit/push to the configured remote and may execute a repo-local script. Main risk is unauthorized publication of generated content rather than malware.