pr-threads-address

SUSPICIOUS: the workflow purpose and GitHub data flows are coherent, but the skill asks the agent to install and use an unpinned third-party GitHub CLI extension that GitHub does not verify. No clear exfiltration or malicious behavior is shown, yet the install-and-execute trust boundary is disproportionate enough to make the skill high risk.