ultrawork

SUSPICIOUS: The skill’s purpose is coherent as a local workflow orchestrator, and there is no visible credential theft or external exfiltration. Risk is driven by autonomous hook-based progression into downstream execution with broad local permissions and unreviewed hook scripts, making it a high-trust automation layer rather than confirmed malware.