implement-issue

SUSPICIOUS. The core GitHub-issue implementation workflow is coherent and mostly proportionate, with official GitHub API usage and normal local verification. The main risks are transitive trust in unresolved local skills (`/grill-*`, `/create-pr`), execution of repo-defined scripts during checks, and autonomous PR creation/push. No clear credential harvesting, hidden exfiltration, or malicious mismatch is present in this file alone.