diagnose-review-fix-orchestrator

SUSPICIOUS: the orchestrator’s stated purpose is coherent and its human-in-the-loop controls are strong, but it delegates core behavior to three unnamed, unpinned sub-skills with no verifiable provenance. Main risk is transitive trust, not direct exfiltration or malware evidence.