autopilot

SUSPICIOUS: the skill’s core behavior matches its stated purpose, but it grants unusually broad autonomous execution over a codebase and relies on several referenced subskills/runtime components whose trust boundaries are not documented here. No direct credential theft, exfiltration, or malicious installer behavior is evident, so this is not malware; the main risk is high-autonomy repo modification plus moderate transitive-trust uncertainty.