complete-pr

SUSPICIOUS: the skill's GitHub-focused capabilities mostly match its purpose, and no direct malicious installer or credential theft appears, but it grants an agent broad autonomous control over repository actions, processes untrusted PR/review content, invokes unreviewed dependent skills, and can trigger a third-party Gemini review flow. Main risk is over-broad automation and transitive trust, not confirmed malware.