pr-creator

SUSPICIOUS: the overall purpose is coherent for PR management, and no obvious exfiltration endpoint is present, but the skill grants an agent the ability to take external GitHub actions under the human's identity and routes those actions through an unreviewed local wrapper script. Risk is driven more by autonomous real-world actions and unverifiable local execution context than by clear malicious behavior.