agentflow

SUSPICIOUS. The skill’s capabilities mostly match its orchestration purpose and the install source appears same-owner and documented, so this is not confirmed malware. However, it grants autonomous development actions through cron-driven workers, merges/reverts, and transitive plugin installation, which makes the overall security risk medium-high.