issue-harvester

SUSPICIOUS. The core harvesting workflow is mostly coherent and uses real same-org tools, so this is not confirmed malware. Risk comes from expanded execution scope (writing tests/running commands), reliance on external CLIs from a custom tap, and optional credential forwarding through Octopool rather than direct GitHub-only access.