taskmaster

SUSPICIOUS: the core task-tracking purpose is mostly coherent, but the skill materially expands into autonomous coding execution with arbitrary shell validation, external content ingestion, and explicit no-approval continuation. There is no clear credential theft or exfiltration path, but the autonomy and indirect prompt-injection surface make it a medium-risk skill rather than a benign planner.