airflow-hitl

SUSPICIOUS. The HITL workflow purpose is coherent and the data flow largely stays within Airflow, but the skill's operational dependency on a non-Apache `af` CLI installed via raw GitHub pipe-to-shell is a meaningful trust mismatch for an Apache Airflow guide. No clear malware or exfiltration behavior is present; risk is primarily supply-chain and tool provenance.