pr-hero-pr

SUSPICIOUS: the stated PR automation purpose is coherent, but the footprint is broader than a simple PR helper because it executes an unpinned third-party CLI, uses that output to steer behavior, and transitively loads another skill into an autonomous remediation loop. No direct credential theft is evident, but install-trust and autonomy risks are material.