herdr

SUSPICIOUS. The skill’s purpose and capabilities mostly align: it is an orchestration guide for Herdr and visibly interactive coding agents, not a covert exfiltration tool. Data flows stay local to the Herdr CLI and local files, with no evidence of credential harvesting, secret-file scraping, hidden execution, or third-party API proxying. The main risk is scope: it authorizes broad agent/session control and text injection, so misuse could cause unintended local actions. Install trust for Herdr is mixed but same-org and documented; official curl|sh remains a supply-chain hygiene concern rather than evidence of malware. Overall this is high-capability orchestration with moderate operational risk, not confirmed malicious behavior.