golang-continuous-integration

SUSPICIOUS: the core CI/CD functionality is coherent and mostly uses legitimate tooling, but the AI review portion expands trust significantly by installing external skills at runtime with wildcard selection and then granting them write-capable review actions. This is not confirmed malware, but the transitive skill installation, telemetry, mutable versions, and autonomous PR interaction make the skill higher risk than a normal CI template.