To avoid suspension I was thinking of something similar driven by Github issues, pr and a skill people would load and run.
Claude Code is known to snoop on other aspects of its operating environment too, not just the texts sent to them: https://news.ycombinator.com/item?id=48734373