accept-web-renderer-prs

The skill has no evident malware, exfiltration, or supply-chain behavior. Its main risk is granting the agent authority to edit and merge PRs without per-action approval; PR content also creates ordinary prompt-injection exposure.