rjv-github-image-upload

SUSPICIOUS: the core purpose is coherent, but the skill’s footprint is riskier than a normal GitHub helper because it installs third-party code and forwards a full-account GitHub session credential to it. Data flows go to GitHub rather than an obvious attacker domain, so this is not confirmed malware, but the credential-forwarding and non-official extension install make it high security risk.