hotfix

SUSPICIOUS: the skill’s core repo/test/git/PR capabilities fit its stated hotfix purpose, and install trust is mostly standard official tooling. The main issue is scope and autonomy: it tells the agent to make code changes, commit, push, and open a PR without asking the user, plus silently append telemetry outside the repo. That makes it a high-impact automation skill with moderate overall security risk, but not confirmed malware.