Github Local

This skill appears to be a straightforward set of instructions for using the GitHub CLI, but there are a few inconsistencies you should consider before installing or allowing it to run with credentials: - Verify origin and metadata: the registry metadata and the bundle's _meta.json disagree on slug/owner and there is no homepage or source listed. If you require provenance, ask the publisher to clarify and fix metadata. - gh dependency: the SKILL.md assumes the gh CLI is available. Confirm gh is installed on the agent environment, or ask the skill author to declare it as a required binary. Without gh the instructions won't run. - Authentication: the skill doesn't declare any required env vars, but gh commands need authentication (gh auth login, GH_TOKEN, or stored config). Don't provide tokens unless you trust the skill and the agent's execution context. If you want to be safe, run the skill in an environment without GitHub credentials or with least-privilege tokens. - Command scope: the provided examples are read-only (checks, list, view, api queries), but gh can also modify state (create/merge PRs, post comments). Review or restrict which gh subcommands the agent may run, and audit any commands that would change repos. If you need higher assurance, request that the publisher: (1) supply a valid source/homepage, (2) correct the _meta.json/registry metadata mismatch, and (3) explicitly declare required binaries and any environment variables needed for authentication. Until those are resolved, treat the package as untrusted for sensitive credentials.