Code Orchestrator
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill is an instruction-only orchestrator that routes coding tasks to other in-repo skills; its requirements and behavior match its description and it does not request extra privileges or install anything.
This orchestrator is coherent and low-risk by itself because it only chooses and sequences other skills and has no installs or credential requests. Before installing, review the SKILL.md and manifest of each downstream skill it calls (especially $shell-safe-exec and $git-discipline) to confirm they don't request excessive credentials, run arbitrary network downloads, or execute unsafe host-level commands. Also verify the downstream skills' install specs and environment requirements; the orchestrator inherits their risk. The agent YAML's allow_implicit_invocation: false is a helpful safeguard — keep it if you want to avoid implicit activation.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
No visible risk-analysis findings were reported for this release.