neo

SUSPICIOUS: the skill’s stated purpose largely matches its orchestration behavior, and its GitLab dependency appears official, so this is not confirmed malicious. However, it has a broad delegated footprint, depends transitively on another skill, processes untrusted external content through agent workflows, and references an ambiguous `acli` dependency, making the overall security posture medium risk.