dev-task-loop

SUSPICIOUS: not malware, but a high-risk automation skill. Its capabilities broadly match the stated purpose, yet it grants an agent wide authority to read untrusted task content and autonomously push code, merge branches, and update external systems using ambient browser/CLI auth. The main concern is operational blast radius and prompt-injection exposure, not deceptive credential theft or an untrusted installer.