git-to-skill

SUSPICIOUS: the skill’s purpose is coherent, but its footprint includes analyzing arbitrary repos and optionally running untrusted repo/package code (`scout` scripts, `pip install`, `npx`). No clear credential harvesting or covert exfiltration appears, yet the supply-chain exposure is broader than a documentation generator strictly needs.