codeagent

SUSPICIOUS. The flagged `.config` access is not evidence of credential theft, and the skill is broadly aligned with its stated purpose. Risk comes instead from delegating repository context and injected local skills to external AI backends, plus reduced permission/sandbox controls and reliance on a same-org but mutable GitHub-sourced CLI installer rather than a pinned official registry package.