work-issue

SUSPICIOUS: the skill’s core workflow is coherent for issue automation, but it enables autonomous repo and tracker actions with no human checkpoint and consumes untrusted issue comments while retaining code-write and command-execution capability. No evidence of malware, credential theft, or suspicious install sources appears in the skill text itself.