gitea

SUSPICIOUS. The skill’s capabilities match Gitea administration, and data mainly flows to the intended Gitea instance, but the central dependency extea is not publicly verified by the provided evidence. Because this unverifiable CLI receives tokens and passwords, risk is high even without clear malicious intent.