openclaw-github-dedupe

SUSPICIOUS. The skill’s GitHub access and mutation scope broadly match its stated dedupe/cleanup purpose, and there is no clear credential exfiltration or off-platform data routing. However, autonomous merge/closeout behavior plus processing untrusted GitHub content while holding write/execute capabilities makes it a medium-risk maintainer automation skill, and the unspecified local/helper tooling prevents a fully benign classification.