toolkit-evolution

SUSPICIOUS: the skill is purpose-aligned as a self-improvement orchestrator and does not show malicious install paths or off-platform exfiltration, but it is high-impact meta-automation. Its broad exec/write permissions, transitive skill dispatch, ingestion of untrusted PR/comment content, and ability to open and merge PRs make the scope risky even though the data flows are mostly coherent with its stated purpose.