subagent-driven-development

SUSPICIOUS: the skill is broadly coherent as a development-orchestration workflow, and there is no evidence of credential theft or exfiltration. Risk comes from unverifiable workflow-tool provenance, transitive dependence on other skills, and autonomous code/merge actions that exceed a purely advisory role.