autonomous-operation

The file is not direct malware (no hard-coded secrets, obfuscated payloads, or explicit exfiltration), but it is structurally risky: it instructs agents to override safety constraints and to run/spawn actions that can modify external systems. In a supply-chain context this increases the attack surface and potential impact of compromised downstream skills or credentials. Only use with strict runtime guards, explicit human approvals, limited privileges, and auditability.