setup-repo

SUSPICIOUS: the repo/bootstrap and GitHub-setting capabilities largely match the stated purpose, and the flagged command/data-exfil patterns are mostly documentation artifacts. However, the skill installs and executes additional agent skills from external GitHub sources, including one not independently verified here, creating a disproportionate transitive supply-chain trust risk even without clear malicious behavior.