g2g

SUSPICIOUS. The skill's capabilities mostly match its stated purpose as a stacked-branch CLI guide, and its GitHub/Graphite data flows are proportionate and routed through official tools. The main concern is install trust: g2g itself is obtained from an unverified Homebrew tap with no confirmed official repo or release provenance in the provided evidence, so the skill carries medium supply-chain risk but not clear malicious intent.