devloop

SUSPICIOUS. The skill’s automation footprint is broadly aligned with its stated devloop purpose, but it carries high operational risk because it enables unattended code-changing agent loops and explicitly installs additional third-party skills. The strongest concerns are transitive skill installation and autonomous execution, not confirmed malware or direct exfiltration.