create-skill

SUSPICIOUS. The skill's repo-writing and PR automation broadly match its stated purpose, and it avoids direct secret-value access or obvious malicious exfiltration. The main risk is structural: it ingests untrusted external research content while having write/exec capabilities, and it can generate new skills that later handle credentials or irreversible actions via local wrappers whose behavior is not visible here.