gh-attach

The skill’s behavior largely matches its stated GitHub attachment purpose, but it requires installing a third-party CLI extension and forwarding a full GitHub browser session credential to that code. That makes it suspicious rather than malicious: the main concern is supply-chain trust and credential exposure, not obvious exfiltration in the documented flow.