gate-wf

SUSPICIOUS: the review-gate purpose mostly matches the read-only analysis behavior, but the skill’s core dependency model is risky because it instructs installation of multiple external skills from GitHub, including third-party personal repos. The main concern is transitive trust and supply-chain exposure rather than confirmed malware or overt credential theft.