org-orchestrate

SUSPICIOUS: the skill’s capabilities mostly match its stated orchestration purpose, and the scanner’s backtick findings are documentation artifacts rather than real command injection. Risk comes from persistent scheduling, broad repo automation, optional permission bypass, and chaining many other skills, but there is no clear evidence of credential theft, hidden exfiltration, or malicious install behavior in this skill alone.