pstack

SUSPICIOUS: the skill is purpose-aligned for engineering orchestration, and the referenced PR tooling appears to be official, but it grants a broad, high-impact workflow: autonomous repo mutation, PR replies, rebases, force-pushes, and even merges. This is not malware and shows no obvious credential exfiltration or third-party interception, yet its operational scope is large enough that a mistaken or manipulated run could cause significant real-world changes.