prd-to-github-milestone

SUSPICIOUS: The skill’s GitHub-focused behavior is largely aligned with its stated purpose, and official `gh` usage is appropriate. However, it delegates privileged issue/milestone creation to opaque local scripts, creating a meaningful trust gap and moderate security risk despite no clear evidence of malware or off-platform exfiltration.