claude-settings-audit

Mostly coherent repository-audit skill with low direct maliciousness, but it carries medium security risk because it expands trust beyond simple local analysis: transitive skill recommendations, broad gh api:* permission advice, and an npx-based Linear MCP suggestion that forwards an API key to external code. Suspicious rather than malicious.