cpr

SUSPICIOUS. The visible skill is simple and shows no direct malware behavior, but its real effect depends on unprovided downstream skills and it authorizes a chained, potentially external PR/MR action without intermediate confirmation. Risk is driven by transitive trust and autonomous publication scope, not by explicit exfiltration in this file.