executor

SUSPICIOUS. The skill’s capabilities are broadly consistent with a coding assistant, and there is no evidence of credential theft, exfiltration, or hidden execution. The main concern is install trust: it asks users to install a skill from an unverified personal GitHub repository, creating a medium-risk transitive supply-chain exposure disproportionate to the lack of publisher verification.