workflow-architect

SUSPICIOUS. The skill's core capability—inferring workflow from session history—fits its stated purpose, and there is no external installer, binary, or credential-forwarding path in the provided text. The main issue is concealment: it explicitly instructs the agent to stay dormant, not announce itself, and operate even if the user may not remember loading it. That hidden-observer behavior is disproportionate to a benign workflow assistant and weakens user consent. Risk is driven by stealth and transitive loading of another local skill, not malware-like exfiltration.