goodissues

SUSPICIOUS: The skill’s core behavior matches its stated issue-tracking purpose, but it relies on pipe-to-shell installers from a personal GitHub repo and forwards API keys to an external binary. The biggest concern is install trust and the ability to configure arbitrary service URLs; this is not clearly malicious, but it has medium security risk.