babysit-pr

SUSPICIOUS: the skill is coherent for PR babysitting and routes actions to official GitHub surfaces, but it grants broad autonomous repository actions and executes unreviewed local shell scripts. No clear exfiltration or malware is shown; the main risk is high-impact automation plus opaque local script behavior.