commit-and-push

SUSPICIOUS: the stated purpose matches committing and pushing, but the skill couples local commit creation with immediate remote publication and depends on an unspecified `git-agent` CLI whose trust cannot be verified from the provided material. The main risks are unverifiable execution trust and autonomous repository writes, not confirmed malware.