ai-automation-workflows

SUSPICIOUS. The skill is largely coherent with its stated purpose and uses a same-org official CLI, so it is not fundamentally incompatible or clearly malicious. Risk comes from broad CLI permissions, recurring automation, optional webhook exfil paths, and especially transitive installation of additional skills, which pushes it above benign but below malicious.