github-api

SUSPICIOUS: The skill's capabilities match its GitHub-management purpose, and there is no risky installer chain, but all API calls and auth are mediated through Maton rather than GitHub directly. That proxy architecture is a significant trust and data-flow risk, especially because it enables broad destructive GitHub actions through a third-party gateway.