why

SUSPICIOUS. The skill’s purpose is coherent, and its use of git/gh plus MCP evidence sources matches that purpose. However, the default behavior is broad, autonomous cross-system querying with agent-mode subagents and dynamic MCP discovery, which increases exposure to untrusted content and makes actual data flows depend on whatever MCP servers are installed. No direct malware, credential theft, or deceptive install behavior is evident, but the breadth and MCP-mediated data access make it higher risk than a simple local analysis skill.