auto-build

SUSPICIOUS. The skill’s capabilities largely match its stated autonomous build purpose, and no credential theft or external exfiltration is evident. The main risk comes from automatic execution of local companion scripts via hooks whose contents are not included, combined with broad unattended code-writing and commit authority.