lfg

Suspicious. The stated purpose matches an engineering orchestrator, but the footprint is too trust-heavy: it delegates almost everything to unversioned external skills and enables broad autonomous repo actions without clear provenance or scope limits. No direct credential theft or exfiltration is shown in this text, but the transitive-skill and autonomy risks are substantial.