workflow-creator

SUSPICIOUS. The skill’s core behavior mostly matches its stated purpose of creating local workflow artifacts, and there is no strong malware signal or hostile exfiltration path. However, it combines broad local write/validation powers with mandatory ingestion of untrusted external research and transitive invocation of other skills, making it higher-risk than a simple documentation skill.