gm-finish

SUSPICIOUS: the skill is internally coherent for batch PRD completion, but it grants substantial autonomous workflow power: repeated retries, delegated sub-skill execution, local file deletion, and automatic commit/push actions until completion. No clear credential theft, external exfiltration, or suspicious installer path is present, so this is not malware; the main risk is unbounded-seeming repository automation and reliance on an unseen companion skill.