autonomous-review

The supplied fragment is workflow-control instruction text, not a normal dependency implementation. It attempts to induce execution of a shell helper and publication of a GitHub verdict, with possible downstream PR approval, merge, or change-request effects. Treat it as untrusted prompt-injection or automation-control content and do not execute the commands based solely on this text. No direct malware payload is visible, but the operational side effects create a significant integrity risk.