describe-pr

SUSPICIOUS: The core PR-description workflow is coherent and uses official GitHub/HumanLayer tooling, but the skill grants an AI agent a risky combination of reading untrusted repo content, executing template-derived commands, syncing data externally, and autonomously editing a live PR. Main concern is indirect prompt injection and autonomous command execution, not confirmed malware.