Security audit
Security checks for vulnerabilities and agentic risk
ClawScan marks this skill suspicious because scanners report GitHub Discussion comment changes beyond its stated issue and pull request purpose, while a referenced script is missing from the scan.
Review the skill's full scope before installing: it may modify GitHub Discussion comments as well as handle issues and pull requests. The referenced script was unavailable to the scan, so its behavior remains unassessed; install only if you are comfortable with that uncertainty and the reported scope.
Deleting and recreating content is consistent with the declared redaction and cleanup purpose. However, the supplied commands explicitly target GitHub Discussions rather than issues or pull requests, extending the skill's stated resource scope. The underlying script is not supplied, so no additional behavior can be established.
The language rule explicitly requires all notification and replacement comments to be written in English, and line L235 reiterates this requirement for all public comments. The skill neither offers a language choice nor documents a justification for this restriction.
