harden-branch

SUSPICIOUS: the core workflow is coherent for branch hardening, but it explicitly chains into multiple external child skills and recommends unpinned transitive installation via `npx skills@latest add`. No direct credential theft or exfiltration is evident, so this is not malware; the main risk is expanded trust and autonomous repo mutation through third-party skills.