dead-code

SUSPICIOUS: the skill is purpose-aligned for dead-code cleanup and shows no external supply-chain or credential-harvesting behavior, but it grants an autonomous agent broad authority to delete code, run local scripts, and write minor telemetry outside the repo. Main risk is integrity/automation scope, not malware or data exfiltration.