pr

SUSPICIOUS. The dispatcher’s core behavior is coherent for a PR workflow skill, and most flagged prompt/command patterns are benign documentation context. The main concern is transitive trust: it depends on other skills and suggests installing one via an owner string that does not match the cited official docs, which is a meaningful install-trust inconsistency. No confirmed credential theft, covert exfiltration, or dangerous pre-execution behavior is present.