github-automation

SUSPICIOUS: The skill's capabilities broadly match its GitHub automation purpose and the MCP service appears official, but setup instructions are partially outdated/incomplete and all GitHub auth/data/actions are routed through Composio as a third-party intermediary. Risk is driven by credential brokering and high-impact repository actions, not by malware-like payload delivery.