code-tidy

SUSPICIOUS: the skill’s core repo-tidying behavior is coherent, but it conditionally installs and executes an insufficiently verified external 'coach' binary/CLI via multiple download/build paths. Official mise installation is explainable; the main risk is third-party tool provenance and execution inside the user’s repository, not overt exfiltration or hidden behavior.