triage

SUSPICIOUS: the stated purpose is coherent, but the skill has medium risk because it processes attacker-controlled issue/PR content, may execute verification commands on PRs, performs public tracker actions, and references transitive skill installation with one unverified helper path. No direct credential theft or malicious exfiltration is evident.