issue-fixer

SUSPICIOUS. The core GitHub workflow is coherent and uses official tooling, with no hidden installer or off-platform credential routing. However, the skill is high-risk because it autonomously acts on external repos, executes untrusted repo-defined scripts, and contains a concealment directive to hide AI involvement in public contributions. Not malware, but disproportionate autonomy and deceptive posting behavior make it unsafe.