afkkit

SUSPICIOUS. The workflow is internally coherent for an unattended GitHub issue-to-PR orchestrator, and its explicit gh usage is proportionate. However, it enables autonomous code changes and PR publication, depends heavily on unreviewed companion skills, and processes untrusted external content with execution/write capabilities, making the overall skill high risk even without clear malware indicators.