idea

SUSPICIOUS: the visible workflow aligns with idea capture and GitHub issue filing, and the external destination appears to be GitHub. The main risk is that the skill delegates core behavior to an unprovided local executable script, so install/execution trust and credential handling cannot be verified from the supplied content.