herdr-orchestration

SUSPICIOUS: the skill is coherent with its stated herdr orchestration purpose, but it normalizes unattended agent execution with disabled permission prompts (`--dangerously-skip-permissions`, `--yolo`) and depends on a third-party orchestration stack whose official install path uses curl|sh. I found no clear credential harvesting or exfiltration, so this is not confirmed malware, but it is a high-impact automation skill with meaningful security risk.