yao-workspace-config

SUSPICIOUS: The skill is purpose-aligned, but it asks the agent to pass Git tokens and raw SSH private keys through an external CLI to a tai42-managed server rather than directly to official Git service endpoints. Same-org PyPI/source evidence lowers supply-chain concern, but the credential-forwarding and intermediary data flow make this a medium-to-high security risk.