on-duty

SUSPICIOUS due to unverifiable external MCP dependency details and autonomous repo/graph action capability, but not malicious: the behavior is largely consistent with a repo-duty/watch workflow, and there is no direct credential theft, hidden execution, or known exfiltration endpoint.