issue-sweep

SUSPICIOUS. The skill is internally coherent for autonomous GitHub issue sweeping, and its data flows stay mostly within GitHub/local repo boundaries. However, it grants an agent broad unattended authority over code, PRs, labels, comments, and issue closure while processing untrusted GitHub content and invoking other skills/scripts, so the overall security risk is high even without clear malicious intent.