full-sdc

SUSPICIOUS: the skill’s workflow is largely coherent with its stated orchestration purpose, but it carries medium risk because it delegates execution to an external CLI and spawned subagents, supports autonomous `yolo` operation, and its published distribution path includes weaker third-party-hosted install trust than the official upstream sources. No direct credential harvesting or clear exfiltration is shown in this skill text.