feature

SUSPICIOUS. The skill's GitHub-focused capabilities largely match its purpose, and tool provenance is mostly official, but it grants an AI agent high-impact autonomous write/push/PR behavior across multiple repositories while consuming untrusted repo and issue content. The main risk is operational abuse and prompt-injection exposure, not confirmed malware or credential theft.