implement-all

SUSPICIOUS. The skill is internally coherent for automated stacked-PR delivery on GitHub and uses official tools/data flows, so there is little evidence of malware or credential theft. However, it grants an agent broad unattended authority to mutate repo state and GitHub workflow objects over many tickets, making it a high operational-risk automation skill even though the install/data-flow story is otherwise benign.