mo-orchestrate-orca

SUSPICIOUS: the skill’s capabilities largely match its stated orchestration purpose, but it has a high-impact footprint: launching multiple agents, manipulating repo state, handing data across tools, and performing external writes to issue trackers and possibly MR/PR systems. The Orca install path looks same-org and documented, so this is not confirmed malicious, but the transitive skill dependence and autonomous write actions make the overall risk medium.