org-maintenance

SUSPICIOUS: the purpose broadly matches repo/PR maintenance, but the core workflow depends on an unverifiable local helper script and grants broad write access across org repos while ingesting untrusted PR content. No clear exfiltration or malicious endpoint is shown, but trust and prompt-injection risk are disproportionate enough to classify this as medium/high security risk.