symphony-setup

SUSPICIOUS: The skill's core actions mostly fit its stated Symphony-setup purpose, and its API/data flows go to official GitHub and Linear endpoints. The main concern is trust: it directs users to build from a personal fork and to install additional skills from that same third-party repo, then enables autonomous, reduced-guardrail agent behavior in the user's repository. This is coherent but higher-risk than an upstream-only setup.