gh-image

SUSPICIOUS: the skill’s purpose is coherent, but its trust model is not proportionate. It installs a community binary from a personal repo and forwards a full GitHub session credential to it to drive an internal, non-public upload flow; even with visible source, releases, and optional attestations, this is a high-risk credential-forwarding pattern rather than a normal low-risk GitHub integration.