babysit-pr

SUSPICIOUS. The skill is broadly aligned with PR babysitting and uses official tools, so there is no strong malware or supply-chain signal. The main risk is proportional but meaningful autonomy: it can loop through review, edit code, commit, and push changes while also sending repository content to external AI reviewer CLIs.