autumn-setup

SUSPICIOUS. The core Autumn setup behavior is internally consistent and mostly benign: official same-org CLI, expected env/config access, and official Autumn login/push flows. The main security concern is transitive skill installation through the third-party skills CLI, which expands the trust boundary and sends metadata off-box; this makes the overall skill medium risk rather than fully benign.