team-assemble

SUSPICIOUS: the skill’s capabilities mostly match its orchestration purpose, but the required footprint is high because it combines broad agent creation, code modification, Bash access, and explicit bypassPermissions execution. There is no sign of credential theft, third-party routing, or malicious install behavior, but the autonomy and prompt-injection surface make it medium risk.