simple-run

SUSPICIOUS. The skill is internally coherent for repo task orchestration and shows no external download or exfiltration behavior, but it enables high-autonomy code modification, review, retry, revert, and commit loops through sub-agents without per-action confirmation. Risk is driven by autonomous repository actions and trust in referenced internal skills, not by malware-like behavior.