copilot-pr-autopilot

SUSPICIOUS: the skill is coherent with its GitHub PR automation purpose and uses official GitHub tooling, so it does not look malicious. However, it is high-impact automation: it reads untrusted PR/review content, executes repo-defined commands, writes code, pushes commits, and posts review actions autonomously, which creates meaningful prompt-injection and repo-action risk.