advisor-orchestrator-worker

SUSPICIOUS: the skill's core purpose is coherent, but it meaningfully expands autonomous execution and prompt-injection exposure by orchestrating external model CLIs with tool access. Main concerns are third-party CLI trust, API-key forwarding, disabled permission prompts, and recursive delegation rather than overt credential theft or exfiltration.