pr-automate

BENIGN functionality with elevated operational risk: the skill's capabilities fit its PR automation purpose and use official GitHub tooling, but it grants a background agent autonomous public posting/editing powers and processes untrusted reviewer content while active. High security risk stems from autonomy and background operation, not evidence of malware or credential theft.