use-git-agent

SUSPICIOUS: The skill’s capabilities mostly fit its stated git-assistant purpose, but it relies on an external `git-agent` binary whose provenance is not fully verifiable from the provided evidence and that may receive provider API keys from local config. The main risk is supply-chain and credential forwarding to a non-fully-verified CLI, not clear malicious intent.