auto-permissions-review-disable

SUSPICIOUS: the skill is internally consistent but its core function is to disable a permissions-review safeguard. There is no exfiltration, credential access, or supply-chain abuse in the visible content, but disabling a security control is itself a meaningful risk, especially since the actual hook behavior is external and not shown.