contributor

Mostly purpose-aligned and uses official GitHub tooling, but it is a medium/high-risk automation skill because it processes untrusted GitHub content while retaining write/exec capability and can publicly act on the user's behalf by commenting, pushing, and opening PRs. Suspicious rather than malicious.