arc-bug-fixer

SUSPICIOUS. The skill’s core capabilities match a bug-fixing workflow, and its named external services are mostly official. However, it combines untrusted external content ingestion with write-capable code changes and repo/tracker actions, delegates trust to other skills, and invokes an unseen local helper script for commit/push/PR automation, making the overall footprint medium-to-high risk rather than benign.