gpt-engineer

SUSPICIOUS due to high-power autonomous engineering behavior combined with repository/content ingestion and external toolchain dependencies, but not malicious. Its capabilities largely match its stated purpose, and the main concerns are broad write/exec authority, prompt-injection exposure from untrusted repo content, and moderate supply-chain trust in external CLIs and bootstrap scripts.