github-pr-workflow

SUSPICIOUS: the skill is mostly coherent for GitHub PR management and uses official GitHub endpoints, but it is riskier than a pure workflow guide because it reads raw local credentials, processes untrusted CI logs, and enables autonomous merge/push actions with bounded retry loops. No evidence of malware, third-party credential harvesting, or unverified binary installation.