double-check

SUSPICIOUS. The skill is purpose-aligned for PR review automation and routes visible data mainly to official GitHub surfaces, with no remote installer chain or obvious exfiltration. Risk comes from high-impact autonomous actions (code changes, pushes, comments, labels) combined with processing untrusted PR content, plus reliance on unverifiable internal auth/playbook components that are not publicly documented here.