moai-workflow-ci-autofix

SUSPICIOUS: the skill’s stated purpose broadly matches its capabilities, and no clear malicious exfiltration or third-party installer is present. However, it combines untrusted external CI/log content, subagent-mediated patch generation, shell execution, and autonomous git push behavior, while the key local scripts are not provided for verification.