pitfall-experience

SUSPICIOUS: the GitHub integration itself is plausible, but the skill is overpowered for a troubleshooting reference tool. It reads a local token file, mandates autonomous issue creation, and most importantly converts untrusted GitHub capsule content into executable remediation guidance, creating a high indirect prompt-injection risk.