agentic-jujutsu

SUSPICIOUS: The skill’s repo-automation purpose broadly matches its capabilities, but the documented 'embedded jj binary' creates a major install-trust gap. Without verifiable provenance for that executable, the skill is high risk even though no explicit credential theft or exfiltration endpoint is shown.