babysitting-pr

SUSPICIOUS: the skill’s capabilities broadly match its PR-maintenance purpose, and it uses official GitHub tooling rather than third-party credential relays. The main risk is workflow autonomy: it reads untrusted PR comments/CI logs and can modify code, push commits, and change PR state with limited approval, creating a moderate indirect prompt-injection and real-world action surface.