describe-pr

SUSPICIOUS: the core GitHub/PR behavior is coherent and the scanner hits are mostly documentation false positives, but the skill performs autonomous external write-backs and optionally routes Linear access through a non-official third-party CLI that can receive credentials. No confirmed malware or covert exfiltration is evident.