airflow-software-factory

SUSPICIOUS. The main risk is transitive installation of a mutable GitHub-hosted skill from a personal repo, which is disproportionate because it grants new agent instructions without independent review. The operational content is otherwise broadly coherent with the stated Airflow/GitHub factory purpose and includes multiple safety constraints, so this is not confirmed malware.