autonomous-orchestration

SUSPICIOUS: the skill’s purpose and GitHub-focused capabilities are broadly aligned, and there is no clear credential theft or malicious installer path. However, it grants an agent ongoing autonomous authority to merge PRs, post comments, and continue across sessions while processing untrusted GitHub content, making the overall security risk high despite low evidence of malware.