recipe-fullstack-build

SUSPICIOUS. The skill’s core behavior matches its stated orchestration purpose and shows no direct credential theft, remote exfiltration, or malicious installer path, but it materially expands trust by auto-loading multiple unseen skills and enables autonomous repo-modifying actions including commits and cleanup. Risk is driven more by transitive skill trust and autonomous execution scope than by explicit malware behavior.