agent-automation-smart-agent

SUSPICIOUS: The skill’s behavior is mostly aligned with its stated coordination purpose and shows no clear exfiltration or credential theft, but its marketplace-based ZIP installation lacks strong provenance controls and it promotes autonomous spawning/scaling actions. Overall this is a medium-risk automation skill rather than confirmed malware.