dev-debug

SUSPICIOUS. The skill’s core behavior matches its stated debugging purpose and shows no external exfiltration or installer abuse, but it grants broad autonomous execution through subagents, lets one agent run shell commands supplied by another, processes untrusted repo/log content with write+exec capability, and chains into another skill. This is a coherent but medium-high risk debugging skill rather than confirmed malware.