backend-implementation

SUSPICIOUS: the skill’s stated backend orchestration purpose is plausible, but its footprint is broader than a pure planner because it can edit files, run Bash, invoke other skills, and drive described auto-deploy behavior. No explicit malware or credential theft appears, yet transitive skill trust and autonomous deployment make the security risk materially elevated.