ship-it

SUSPICIOUS. The skill is internally coherent and uses official GitHub tooling, so it does not look malicious or like credential harvesting. However, its core purpose is autonomous merge execution without human review, which is a high-impact action and creates substantial operational risk even with the built-in gate and read-only judge pattern.