agentflow

SUSPICIOUS: the skill’s purpose matches its orchestration capabilities, but it depends on an external upstream plugin/runtime not verified here and enables autonomous code and PR actions via cron and multi-worker dispatch. The main concern is install trust and elevated autonomy, not confirmed malicious behavior.