ship

SUSPICIOUS: the skill's purpose aligns with autonomous feature delivery, but its actual footprint is broad because it acts as a conductor for many other skills and can commit, open PRs, and update trackers after one approval gate. No direct credential theft or exfiltration is visible, so this is not malware, but the transitive-skill trust chain and autonomous external actions make it a medium-high security risk.