ai-ml

SUSPICIOUS: the bundle itself is mostly documentation/orchestration, not a direct payload, but its real footprint is broad transitive skill invocation from a personal-source workflow labeled safe. The main risk is unpinned, unverified downstream skills and expanded data/action scope through agent, observability, and provider integrations rather than direct malicious behavior in this file.