autonomous-operation

SUSPICIOUS: the main risk is not malware or supply-chain behavior, but that the skill's stated purpose is to alter agent governance by overriding higher-priority instructions and reducing user oversight. It is instructionally unsafe and disproportionate as an operating-mode skill, though it shows no direct credential theft, exfiltration, or malicious payload execution.