pr-guardian

SUSPICIOUS: The skill is largely coherent for GitHub PR maintenance and uses official gh data flows, but it grants an agent substantial autonomous write authority on live pull requests and depends on a less-verified external guardian runner. No confirmed malware or overt exfiltration is evident, yet the combination of autonomous pushes/comments plus partial trust uncertainty around kaizen-loop makes this a medium-risk skill rather than benign.