backend-development-feature-development

SUSPICIOUS: the skill’s purpose and capabilities mostly align, but its scope is very broad and can drive production-affecting actions through subagents, including deployment coordination and pentest-style validation. There is no direct credential harvesting or exfiltration in the supplied skill, so this is not confirmed malware, but the combination of high-impact autonomy and moderate install-trust concerns makes it higher-risk than a normal documentation workflow.