golang-continuous-integration

SUSPICIOUS. The core CI/CD templates are coherent and mostly use official ecosystems, but the skill also installs additional skills transitively via a third-party CLI with wildcard selection inside automated review jobs. Combined with AI review of untrusted PR content and outbound transmission to Anthropic, this creates a broader trust and prompt-injection surface than a plain CI configuration skill needs. No clear credential theft or exfiltration endpoint is present, so this is not confirmed malware.