github-author-context

SUSPICIOUS. The skill's purpose and data flows mostly align with maintainer review work, and GitHub API usage is official. The main issue is required dependence on an unverifiable local `clawtributors` executable plus broad local maintainer-data access and autonomous note-writing, which raises security risk without clear evidence of malicious intent.