implement-issues

SUSPICIOUS. The skill’s capabilities mostly fit its stated purpose, and official `gh`/Codex usage is coherent, but it has a broad autonomous workflow footprint: spawning subagents, executing local checks, pushing branches, opening/editing PRs, posting reviews, and retrying CI fixes across multiple issues. The largest concern is transitive trust in unspecified companion skills and moderate autonomy, not confirmed malware or credential theft.