forge-address-pr-feedback

SUSPICIOUS: The skill is purpose-aligned for addressing GitHub PR feedback and uses official GitHub APIs with no suspicious installer or credential-forwarding behavior. The main risk is that it gives an agent autonomous ability to modify code, push commits, and publicly reply to reviewer comments while processing untrusted PR text, making it high-impact if misused or prompt-injected.