game-ci-pipeline

SUSPICIOUS: the skill’s purpose and capabilities mostly align with legitimate game CI/CD setup, but its footprint includes meaningful supply-chain and credential-forwarding risk. The main concerns are routing secrets into third-party GameCI actions, relying on a community Godot image, mutable version pinning, and downloading/running butler from an older official host pattern. No clear evidence of malicious intent, covert behavior, credential harvesting, or off-purpose exfiltration was found.