pr-threads-resolve

SUSPICIOUS. The purpose and GitHub-focused capabilities are coherent, and there is no clear exfiltration or malicious misdirection. However, the skill requires installing and then using a third-party gh extension from an unverified GitHub repo, which is disproportionate enough to keep risk elevated under the mandatory unverifiable-dependency rule.