ralph-orchestrator

SUSPICIOUS: the skill’s stated purpose matches its capabilities, and there is no clear credential theft or exfiltration path, but it does enable autonomous iterative development actions through an external loop/plugin with limited supervision. Main concerns are autonomy risk and moderate trust in the external plugin/hook rather than overt malicious behavior.