github-project-replication

SUSPICIOUS: the skill’s purpose is coherent, but its actual footprint is high-risk because it operationalizes arbitrary third-party code execution, untrusted content ingestion, and transitive skill trust. The main issue is not a mismatched purpose; it is that the purpose itself grants broad agentic execution over untrusted repos with insufficient provenance controls.