qodo-pr-resolver

SUSPICIOUS: The stated purpose matches PR review remediation, but the skill gives untrusted Qodo review content direct control over code changes and enables batch repository actions including commits, PR comments, PR creation, and pushes. No clear malicious exfiltration or rogue installer is shown, yet the external-content-to-edit/action path makes this a high-risk automation skill.