ccw

SUSPICIOUS: the skill’s behavior is mostly consistent with an orchestration/coordinator purpose, and it does not itself show credential theft, hidden exfiltration, or remote install behavior. However, it has a broad execution footprint, auto-approval mode, and delegated control over many downstream skills, so its effective risk is medium and depends heavily on the safety of the referenced skill chain.