recipe-front-build

SUSPICIOUS: the skill’s purpose and local repo actions are broadly coherent, but it materially expands trust through required skill loading and autonomous sub-agent orchestration. No direct credential theft or exfiltration is evident in the provided text, yet transitive skill installation/loading and batch-approved autonomous commits make this a medium-risk orchestration skill.