squad-run

SUSPICIOUS: the skill’s broad execution footprint mostly matches its orchestration purpose, but it enables high-impact autonomous actions, executes repo-defined formatter/build commands, and mixes untrusted board content with write/exec-capable subagents. No clear credential theft or overt malicious exfiltration is present, but operational risk is medium-high.