spec

SUSPICIOUS: the skill is broadly consistent with its stated orchestration purpose, but its autonomous no-confirmation workflow, delegated trust in unpublished sub-skills, and ability to act on untrusted external content while running local validation commands make it medium risk. No evidence of credential harvesting, external exfiltration, or malicious installer behavior appears in the provided text.