recursive-mode

SUSPICIOUS: The core repo-orchestration behavior is broadly consistent with the stated purpose, but the skill expands trust in two notable ways: it can install additional skills via the Skills CLI and it can delegate work to external CLI/model routes defined elsewhere. Without the referenced scripts and router config, the main concern is transitive trust and possible outbound sharing of repo context, not confirmed malware.