ensure-epic-github-issue

The skill's purpose, GitHub data flows, and local helper usage are generally coherent, with no evidence of credential harvesting or a remote payload. However, the documented unquoted heredoc creates a concrete shell command-injection path from epic content and warrants a suspicious risk classification.