ce-commit-push-pr

SUSPICIOUS: the skill is mostly coherent with its stated PR automation purpose and uses official Git/GitHub tooling, but it performs external write actions, supports reduced-confirmation pipeline execution, and requires transitive trust in another skill plus an optional CLI extension. No clear credential theft, exfiltration, or deceptive hidden behavior is evident from the provided text.