grilling

SUSPICIOUS: the core questioning behavior matches the purpose, but the skill expands into remote repo cloning, repo-instruction ingestion, and autonomous commit/PR side effects. The main risk is indirect prompt injection from remote repo content plus external publication of user decision data to an unconstrained repository target.