issue-fixer

SUSPICIOUS: the skill is purpose-aligned for repository maintenance and uses official GitHub tooling, but it grants an AI agent autonomous repo-writing actions and lets untrusted GitHub issue content influence code changes and command execution. Main risk is operational and supply-chain exposure from `bun install`, not overt malware or credential theft.