agent-orchestrator

SUSPICIOUS: the skill’s orchestration purpose is plausible, but its actual footprint is broader than a normal helper because it auto-discovers, loads, and coordinates other skills without manual registration. The main risk is transitive trust and indirect prompt injection from arbitrary local SKILL.md content, not confirmed malware or overt exfiltration.