work

SUSPICIOUS: the workflow/router purpose broadly matches its capabilities, but the explicit `System Prompt for Next Agent` requirement is incompatible with legitimate workflow management and materially elevates risk. The skill also combines untrusted-content intake, command execution, file mutation, and delegated sub-skill/subagent routing, producing medium-high security exposure even without clear malware or credential theft behavior.