scarce-resource

SUSPICIOUS/HIGH-RISK rather than confirmed malware. The stated purpose is coherent, but the skill's core behavior is delegated to unverifiable local `orch-*` executables that read `~/.config/orchestrate/<repo>.env` and can trigger workflow actions. That combination makes the trust boundary too broad for a scheduler skill unless the helper scripts are separately verified.