implement-issue-tree

SUSPICIOUS: the skill’s footprint largely matches its purpose as a GitHub/worktree automation workflow, and its tools and endpoints are mostly official and purpose-aligned. However, it grants broad shell + GitHub write capabilities, performs autonomous PR creation and optional auto-merge, processes untrusted external content, and includes transitive skill installation instructions, making it a high-impact automation skill with meaningful security risk even without clear malicious intent.