repo-system-map

SUSPICIOUS: the core repository-analysis behavior is coherent, and data flows mainly use normal GitHub endpoints with explicit warnings not to read secrets. However, the skill’s footprint extends into autonomous public contribution workflows: it clones a third-party personal repo, runs its install/build/validation commands, and may push/open PRs unless the user opts out. That makes it higher-risk than a local visualization skill, though not clearly malicious.