A repository tarball is a single request that also carries the commit it was taken from, unlike the
Contents API walk the skill installer uses, which needs one request per directory and per file.
when the source is not a GitHub repository, the download fails, the archive contains an
entry that would escape destination, or the requested source.path is not in the archive.
A repository tarball is a single request that also carries the commit it was taken from, unlike the Contents API walk the skill installer uses, which needs one request per directory and per file.