review-prs

SUSPICIOUS: the skill’s GitHub and git capabilities broadly match its stated PR-triage purpose, and it uses expected official tooling. The main risks are operational: it can autonomously make public repo changes, it processes untrusted PR content while holding write/exec powers, and it delegates judgment to another unverified skill. No clear malware or credential-theft behavior is present, but this is not a low-risk read-only helper.