github-repo-browser-read-only

SUSPICIOUS. The skill’s read-only GitHub browsing purpose mostly matches its capabilities, and the endpoints appear to be official AgentPMT infrastructure, so this is not confirmed malware. However, it sends GitHub-authenticated access and private repository data through AgentPMT-hosted services and storage rather than directly to GitHub, and it asks users to install additional skills, making the overall footprint broader and riskier than a narrowly scoped direct GitHub integration.