stack

SUSPICIOUS. The stated purpose and capabilities are coherent for stacked PR workflow management, and data flows appear to target official GitHub/GitLab paths. However, the skill's core mechanics are delegated to an unresolved `bro` CLI with unverifiable provenance from the provided evidence, which creates a mandatory high supply-chain risk floor; the merge/publish automation also has real-world repo impact.