worker-dispatch

SUSPICIOUS: the skill's GitHub/worktree capabilities fit its stated purpose, and there is no hidden download/exfiltration path, but it materially increases risk by autonomously spawning unsandboxed worker agents with broad tool access and GitHub write capabilities. This is a coherent orchestration skill, not malware, yet its execution model is high-trust and potentially dangerous if issue content or prompts are manipulated.