gastown

SUSPICIOUS. The skill’s broad orchestration behavior generally matches its stated purpose, but it has a large execution footprint: unrestricted shell access, multi-agent code modification/merge capability, and incomplete install provenance for the gt/bd CLIs. No clear credential theft or exfiltration is shown, so this is not confirmed malware, but it carries meaningful operational and supply-chain risk.