soia-dev-github-ops

SUSPICIOUS: the operational scope is coherent for a GitHub ops skill and data flows mainly target official GitHub tooling, but the install model introduces medium risk through transitive skill installation, wildcard agent permissions, and hard dependencies on other skills. High-impact actions are documented with sensible confirmation gates, so this is not malicious, but it is broader and riskier than a minimal single-purpose gh helper.