github-pr-workflow

SUSPICIOUS: The core capabilities align with a GitHub PR workflow and all network calls go to official GitHub services, so this is not fundamentally malicious. However, the skill reads raw credentials from local files and enables autonomous repo-modifying actions, making its credential handling and execution scope moderately risky.