epic-runner

SUSPICIOUS. The skill’s capabilities largely match its stated purpose of unattended epic delivery, so this is not a disguised credential stealer or obvious malware. However, it is a high-risk automation skill because it authorizes broad autonomous repository and tracker actions, including merges and issue lifecycle changes, with minimal human checkpoints; some referenced helper skills/tools are also not independently provenance-verified from this text.