resolve-pr-feedback

The skill is purpose-aligned and uses official GitHub/Git tooling, so it does not look malicious. However, it is high-impact: it processes untrusted review text and can autonomously edit code, push commits, and post/resolve PR feedback, creating meaningful prompt-injection and autonomous-action risk. Overall classification: SUSPICIOUS due to workflow risk, not credential theft or clear exfiltration.