herdr-goal

SUSPICIOUS: the skill is purpose-aligned as a Herdr orchestrator, but it grants broad autonomous control to spawned agents using `--dangerously-skip-permissions`, processes untrusted agent/output content, and can drive real repo and deploy actions. The main concern is high-trust automation and transitive control surfaces, not confirmed malware or credential theft.