auto-refactoring

SUSPICIOUS. The skill's purpose matches local refactoring, but it grants the agent open-ended autonomous execution and autonomous commits with no further approval. There is no clear credential theft or external exfiltration path, so this is not malware, but it is a meaningful safety and execution-risk skill.