things-mac

SUSPICIOUS: the skill is mostly purpose-aligned, but it relies on a third-party personal GitHub CLI, asks for Full Disk Access, and forwards a Things auth token to that CLI. Data flows appear consistent with local Things access and the official URL scheme rather than obvious exfiltration, so this is better classified as elevated trust and credential-handling risk than confirmed malware.