pr-hero-ci-setup

SUSPICIOUS. The skill’s GitHub/CI scope is mostly coherent and its secret-handling instructions are cautious, but it relies on repeated unpinned execution of an insufficiently verified `pr-hero` npm package and routes secrets into CI runs that may execute PR-head code. This looks more like supply-chain and workflow-trust risk than confirmed malicious intent.