coding-agent

SUSPICIOUS: the skill’s purpose matches its coding-agent capabilities and the install sources are official, so this is not malware-like. However, it grants external coding CLIs broad autonomy over local repos and GitHub actions, explicitly recommends reduced-permission modes, and processes untrusted PR/repo content with write/exec access, creating high operational risk.