watch-pr

SUSPICIOUS. The skill’s purpose is coherent for GitHub PR automation, and its main network flows stay on official GitHub surfaces, but it is high-risk because it lets the agent autonomously modify code, commit, push, and respond to external review content while also invoking repo-local scripts and another skill. This is not confirmed malware, but it is a powerful automation skill with substantial autonomy and prompt-injection exposure.