tech-debt-sprint

SUSPICIOUS: the core purpose is coherent for a code-maintenance skill, but it is over-autonomous and relies on unverified chained skills. No direct malware, credential harvesting, or remote exfiltration is shown; the main risks are transitive trust, autonomous code/commit behavior, and undocumented local telemetry writes.