fix-ci

BENIGN in purpose and data flow, but HIGH operational risk as a skill because it can autonomously modify and push code based on untrusted CI output. The main concern is autonomous repository actions plus prompt-injection exposure from CI logs, not malware or credential theft.