workflow-orchestrator

SUSPICIOUS: the skill's core purpose is coherent, and it shows no direct credential theft, remote exfiltration, or untrusted installer use. However, automatic triggering of multiple unseen skills creates meaningful transitive-trust and autonomy risk that is disproportionate unless those downstream skills are verified and tightly scoped.