gemini-runner

SUSPICIOUS: the stated purpose mostly matches the behavior, and the Gemini CLI provenance appears legitimate, so this is not malware-like. Risk comes from delegating to an external CLI, allowing fallback to other runners, and especially enabling `--yolo` auto-approval by default, which is broader autonomy than a simple prompt runner needs.