create-pr

This is operational guidance that can cause an automated agent to install an external plugin and commit and push files without an explicit review step. The unvalidated `/tmp/*.html` move and forced Git staging create a risk of unintended content being published. The fragment alone is not evidence of malware; treat it as potentially unsafe agent instructions and verify generated files and diffs before committing or pushing.