codebase-migration

SUSPICIOUS: The skill is coherent for codebase migration, but its execution scope is aggressive. It combines full-repo ingestion with autonomous edits, test/build execution, and git commits/resets without user confirmation. No clear credential theft or external exfiltration is present, so this is not malware, but it poses medium security risk through autonomous destructive actions and prompt-injection exposure from untrusted repository content.