auto-project-runner

SUSPICIOUS. The skill’s capabilities mostly match its purpose as an autonomous codebase worker, and there is no clear credential theft or exfiltration path. However, its broad project access, quiet operation, and authority to run repository-defined commands with limited user confirmation create meaningful security risk, especially if pointed at an untrusted codebase.