babysit-pr

SUSPICIOUS: the skill's core behavior fits PR maintenance, and its data flows stay on official GitHub paths, so there is no strong malware signal. However, it enables high-impact autonomous actions, repeatedly executes repo scripts, and is over-broad in sweeping up and pushing all local changes from a shared branch, creating meaningful operational and security risk.