nexus

SUSPICIOUS. The skill’s capabilities broadly match its stated purpose as an orchestration hub, and there is no clear credential exfiltration or off-brand installer behavior. The main concern is disproportionate autonomy: default AUTORUN_FULL plus documented use of `--dangerously-skip-permissions` can let spawned agents act with reduced approval friction, creating meaningful security risk even though the behavior is framed as orchestration rather than stealth or theft.