supervisor

SUSPICIOUS: the skill's purpose matches repository automation, and its install sources are mostly official, but its footprint is high-risk because it autonomously performs write/merge/push actions, auto-installs project dependencies, and consumes untrusted GitHub content while retaining shell and repo mutation powers. This is more a dangerous autonomous ops skill than confirmed malware.