pr-merge-prep

SUSPICIOUS. The skill’s capabilities broadly match its stated purpose of autonomous PR maintenance, and its data flows appear GitHub-native with no third-party installer or exfiltration path. The main issue is proportional autonomy: it reads untrusted review comments/CI logs and can modify code, push commits, resolve threads, and request re-review during unattended runs, creating a meaningful prompt-injection and workflow-abuse risk even though the functionality is coherent.