github-git-recon

SUSPICIOUS. The skill is internally coherent, but its core function is offensive git-host reconnaissance and secret discovery against developers and orgs. There is little malware evidence and no malicious installer in the excerpt, yet the capability itself is high risk for an AI agent because it systematizes credential hunting, identity mining, and infrastructure mapping.