qa

The skill’s capabilities and GitHub data flows are consistent with its QA issue-filing purpose, and no malicious credential routing or installation behavior is evident. The principal risk is that issue creation and edits are performed without per-action user approval; external issue content also presents a limited prompt-injection surface.