ai-request-skill

SUSPICIOUS: the core purpose is coherent, but the skill combines transitive skill installation with mandatory autonomous GitHub write actions. The main risk is not malware or credential theft; it is delegated third-party influence plus public PR/issue creation without clear per-action approval.