prkit-cli

SUSPICIOUS: the skill's PR-review capabilities mostly match its stated purpose and it preserves user approval for GitHub writes, but its trust model depends on a non-verified external `prkit` desktop app/CLI. The unresolved provenance of that binary, plus publisher-description mismatch, makes the skill high risk from an install/execution-trust perspective rather than clearly malicious behavior.