heyeddi-ci-fails

SUSPICIOUS: the skill’s core purpose is coherent for CI triage, but its default behavior is unusually aggressive because it auto-runs on PR work and always commits/pushes fixes without explicit user confirmation. No clear credential theft, malware, or off-purpose data exfiltration is described, but the autonomous write-and-push scope raises meaningful operational risk.