workflow-feature

SUSPICIOUS: the stated purpose matches a workflow-orchestration skill, but the actual execution substrate is opaque, publicly unverifiable, and highly autonomous. No explicit credential theft, installer abuse, or exfiltration is shown, so this is not malware; the main risks are opaque internal command trust and indirect prompt injection through external design inputs.