open-dynamic-workflows

SUSPICIOUS. The skill’s capabilities largely match its purpose, and the install path appears to come from the named upstream GitHub project rather than an obvious impersonator. However, it requires installing and running a community repo with npm lifecycle-script risk, handles provider API keys, and is expressly designed to execute agent-generated code and shell commands across multiple agents, making the overall security risk high even without clear evidence of malicious intent.