oz-platform

SUSPICIOUS: the core Oz API/CLI usage is coherent and mostly same-org, but the skill materially expands scope by enabling autonomous GitHub actions and forwarding user secrets to third-party coding CLIs. The main concerns are credential forwarding, mutable action/version references, and prompt-injection-prone automation rather than overt malware or deceptive exfiltration.