autopilot

SUSPICIOUS. The skill is broadly coherent with its stated purpose, and the cited install path appears same-org rather than a random third-party payload. The main concern is proportionality: it grants an agent highly autonomous write/exec authority over a codebase, including iterative QA and delegated subagents, with little explicit human gating. No clear credential harvesting or off-platform exfiltration is described, so this looks like a high-risk autonomy/orchestration skill rather than confirmed malware.