claude-settings-audit

SUSPICIOUS: The core repo-audit behavior is benign and locally scoped, but the recommended footprint is not fully proportional to that purpose. The main issues are inclusion of gh api in a purported read-only baseline, transitive trust expansion via many sentry-skills, and a Linear MCP recommendation that does not match official docs and may forward credentials externally.