review-pr

SUSPICIOUS. The stated purpose matches a PR review/fix workflow, and there is no clear malicious or exfiltrative behavior. Risk comes from broad autonomous repo actions and reliance on ambiguously sourced helper commands, especially Ponytail-related tooling with unclear publisher provenance; absent clearer trust boundaries, this is a medium-risk skill rather than benign.