refactor

SUSPICIOUS. The skill’s git/worktree capabilities fit its refactoring purpose and there are no external installers, credential requests, or off-platform data flows. The main risk is that it instructs the agent to bypass confirmations in auto/yolo mode and autonomously modify, merge, revert, and push code, which is disproportionate from a safety-control perspective even if not clearly malicious.