team-repair

SUSPICIOUS. The skill’s core behavior broadly matches its stated repo-repair purpose and shows no obvious credential theft or remote exfiltration, so it is not malicious. Risk comes from high-write autonomy, project-level AGENTS.md injection, and opaque local helper script execution; this is a powerful maintenance skill that should be treated as medium risk rather than benign.