github-repo-management

SUSPICIOUS. The core capability matches GitHub repository management and uses official GitHub endpoints, so this is not malware-like or a proxy credential harvester. However, the skill is over-permissive in how it acquires credentials by scraping ~/.hermes/.env and ~/.git-credentials, and it demonstrates sending sensitive local files into GitHub secrets; combined with workflow dispatch and gist/release creation, that makes it moderately risky despite coherent purpose.