ten-lane-highway

SUSPICIOUS by policy due to transitive skill loading and broad autonomous execution, but not malicious. The capabilities largely fit the stated highway-orchestrator purpose, install provenance for Amplifier appears same-org and officially documented, and I found no covert exfiltration, hidden execution, or credential harvesting. Main risk comes from high-impact automation plus runtime trust in other skills and mutable GitHub-based tool distribution.

The script itself contains no overt malware behaviors (no network beacons, persistence, or credential theft), but it is a high-impact command-dispatch mechanism: it executes arbitrary shell commands stored verbatim in a writable TSV ledger via bash -c during sweep. If infra.tsv (or the add inputs that populate it) can be influenced by an attacker, this becomes a direct arbitrary command execution vector. The multi-owner guard reduces accidental cross-lane teardown, yet it does not provide integrity/authenticity for ledger contents and does not prevent abuse through ledger tampering. Logging and environment-driven “already gone” classification can further amplify operational/security exposure if destroy_cmd or its output contains sensitive data.