standup

SUSPICIOUS: the skill’s main function is coherent, and it uses official GitHub APIs without suspicious installers, but its footprint is privacy-heavy. Auto-posting a standup that aggregates location, schedule, local notes, and work progress to GitHub without explicit per-run confirmation is disproportionate for a simple daily check.