commit-work

SUSPICIOUS: the skill’s core git capabilities fit its stated purpose, and there is no external installer or credential-harvesting pattern. The main risk is disproportionate autonomy: it stages, commits, and then pushes to the configured remote automatically after processing untrusted repo content and instruction files, which can publish code without explicit per-action approval.