bug-tracker

SUSPICIOUS: the core GitHub triage behavior matches the stated purpose, but the skill’s footprint is broader than simple issue management because it copies `.env` secrets into worktrees, empowers subagents to modify code and merge changes, and performs public tracker actions autonomously. Install trust is mostly acceptable for `gh`, `git`, and `fallow`, but the unverified Bright Data plugin reference and secret-handling workflow keep risk in the medium range rather than benign.