skill-composer

SUSPICIOUS: the skill's stated purpose matches orchestration, but its main risk is transitive trust. It is a meta-skill with broad local execution and the ability to invoke other skills, so overall risk is medium even without direct exfiltration, external downloads, or credential harvesting in this file.