diff-recap

BENIGN with elevated supply-chain risk. The skill’s capabilities align with its stated purpose: it reads local git diffs and formats a recap without evident credential access or external data flow. The main issue is install/execution trust around the referenced `yon` CLI (and optional visualize tooling), whose provenance is not established in the provided evidence, plus a mild documentation inconsistency in claiming 'zero external dependency' despite relying on local tools.