skill-repo-manager

SUSPICIOUS. The skill’s behavior mostly matches its stated repo-manager purpose, but that purpose itself includes high-risk transitive skill installation from remote repositories and marketplace sources, including wildcard installs and external repos. No confirmed malware or hidden exfiltration is present, and the command-injection flags are documentation artifacts, but the supply-chain and inherited-permission exposure is substantial enough to treat this as high security risk.

No direct malware behavior is apparent in this module (no execution of fetched code, no obfuscation, no credential theft/exfiltration). However, it performs high-impact supply-chain operations by running `git submodule add`/`update` using user-controlled `source` and `--branch`, thereby potentially importing attacker-controlled repositories into the working tree. Additionally, it relaxes git local-file transport safety via `protocol.file.allow=always` for local sources, and it prints untrusted metadata without sanitization (possible terminal/log injection). Use should be restricted to trusted inputs and controlled environments.