melech-babysit

SUSPICIOUS: The skill’s core purpose is coherent, but it enables autonomous repeated PR actions and processes untrusted review content while writing code and posting replies. Main risk is autonomy plus indirect prompt-injection exposure, not malware or supply-chain abuse.