git

The skill's Git/GitHub capabilities and tool use generally match its stated purpose; there is no clear credential exfiltration, concealed payload, or malicious install path. Its principal risk is allowing an agent to perform consequential repository and public GitHub actions with insufficient explicit approval, compounded by destructive recovery and cleanup commands. Use confirmation gates before production merges, release publication, public comments, and deletion.