architect

SUSPICIOUS. The skill’s capabilities mostly match its stated architecture-review purpose, and there is no evidence of credential theft, hidden exfiltration, or malicious pre-execution. However, it relies on an unspecified local helper script, automatically commits and pushes artifacts, and installs trust transitively into another skill without provenance details. This is better classified as a moderate workflow/security risk than malware.