github-project-management

SUSPICIOUS: The skill's GitHub management behavior mostly matches its stated purpose, but it relies heavily on third-party swarm CLIs executed via `npx`, including an alpha package, and grants broad automation powers over GitHub content. Main concerns are supply-chain trust, external processing of repository data, and autonomous actions on untrusted issue/comment content rather than clear malicious intent.