github

SUSPICIOUS: the skill's purpose is plausible, but its claimed use of GitHub's official MCP server conflicts with the documented upstream tooling. The unspecified `github` CLI and shared Muse-owned app create install-trust and data-flow uncertainty disproportionate to the 'official MCP' claim, though there is no direct evidence of credential theft or overt malware.