gsd-audit-fix

SUSPICIOUS: the purpose matches a repo-maintenance workflow, but the skill grants broad autonomous code-modifying and commit-making authority while hiding the real instructions in an unreviewed local workflow file. No clear credential theft or exfiltration is visible here, so this is high operational risk rather than confirmed malware.