run-with-it

SUSPICIOUS. The skill’s capabilities broadly match its stated purpose as an orchestration runtime, and external data flows go mainly to official GitHub APIs plus local helper scripts. However, it grants a high-autonomy control plane that reads untrusted issue content, spawns detached code-writing/executing sub-agents, and performs GitHub updates/closure with little user intervention; this is proportionate but still medium-high risk rather than benign.