work-branch-name-gen

SUSPICIOUS. The skill’s purpose is coherent, but it delegates core functionality to an unverifiable local dotfiles script (`df-ti`). There is no explicit credential harvesting or remote installer chain, yet the hidden dependency makes execution trust weak enough to classify as suspicious rather than benign.