pr-evidence-capture

SUSPICIOUS: the purpose is coherent, but the skill’s footprint is stretched by requiring an unofficial personal `gh` extension for uploads and forwarding GitHub session/token material to that third-party tool. Core `gh` usage and browser screenshot capture are consistent with PR evidence collection, but the credential path and unverifiable extension provenance make the overall skill high risk.