implement-pr

SUSPICIOUS: the skill’s purpose is coherent for developer workflow automation, but it materially expands trust by invoking several other skills of mixed/unclear provenance and authorizes autonomous repository and tracker actions. No confirmed malware or direct exfiltration appears in this file, but the transitive-skill dependency chain and merge-workflow automation make the overall risk medium-high.