wk-workflow

Purpose and capabilities mostly align for a development workflow skill, and there is no clear malware or credential-harvesting behavior. The main risk is high autonomy: it directs the agent to perform source-control and CI actions automatically, including publishing and merge-related steps, and it can consume untrusted external artifacts while retaining edit and shell access.