gsd-2-agent-framework

SUSPICIOUS: the core framework purpose and main capabilities are broadly aligned, and the primary CLI install path looks legitimate. Risk comes from high-autonomy operation, transitive skill installation, and broad ingestion of external/project content while retaining write/exec powers; these are substantial security risks even without clear evidence of credential theft or malware.