git-hooks

SUSPICIOUS. The core hook setup behavior is largely coherent with the stated purpose and uses mostly official distribution channels, but the skill is overly autonomous: it installs tools, modifies repository state, may create commits on the user's behalf, and writes unrelated local telemetry outside the project. This is not confirmed malware or credential theft, but it is a medium-risk skill due to autonomous real-world actions and broader-than-necessary local persistence.