gitea-coordinator

SUSPICIOUS. The skill’s capabilities mostly match its orchestration purpose, and there is no clear credential theft or remote payload execution in the provided text. However, it enables broad autonomous repo actions, delegates work to another skill, and relies on unseen local scripts for CI/PR checks, making the operational risk high even without evidence of malware.