adb-workflow-orchestrator

No explicit malware behavior is visible in this module (no obfuscated payloads, no network calls, no eval/exec, no hardcoded secrets). However, the module acts as a workflow-driven executor that can run project-local Python scripts chosen based on YAML-controlled `action` and parameters, using `uv run` via `subprocess.run`. This creates a high-risk primitive for supply-chain or attacker-controlled workflow abuse: if an attacker can modify the workflow YAML (including `!include` files) or the scripts under `.claude/skills/**/scripts`, they can cause arbitrary code execution in the environment. Confidence is limited because the end of the file is truncated and the contents of the executed scripts are not provided.