sprint

SUSPICIOUS: the overall purpose is coherent for a GitHub batch-work skill, and data flows mostly match that purpose, but it grants broad autonomous code and PR actions, executes unreviewed repo-local scripts, and exposes a prompt-injection path from GitHub issues into write-capable subagents. No strong evidence of credential theft or malicious exfiltration is present.