autonomous-workflow

SUSPICIOUS: the skill's core behavior matches its stated purpose, but it materially increases risk through autonomous repository/GitHub actions and transitive installation of many companion skills and an optional agent. No clear credential theft or exfiltration is present, so this is better classified as a high-privilege, medium-risk orchestrator rather than malware.