I would hesitate before installing any extension that wants access to GitHub, especially if it auto-updates. I know, IDE extensions are even better methods of attack and we often don't think twice about auto-updating those, but still. Something about giving a third-party extension access to my GitHub to do whatever seems a bit fishy. Just me, tho.