heyeddi-ci-fails

The skill is purpose-aligned for CI triage, but it is high risk operationally because it defaults to autonomous code changes and remote pushes on any PR workflow without waiting for user confirmation. I do not see confirmed malware or clear credential harvesting, but the no-confirmation commit/push behavior makes the skill suspicious and unsafe for least-privilege use.