repo-cli

SUSPICIOUS: The skill’s git-management capabilities are broadly aligned with its purpose, but install trust is weakened by a source/publisher mismatch and an unverifiable GitHub clone URL. External AI CLI integration is plausible for AI commit features, yet the skill under-specifies where repository diffs and history are sent and what credentials those tools use. Overall this looks more like a risky or inconsistently documented developer skill than confirmed malware.