process-issues

SUSPICIOUS: the skill is purpose-aligned for GitHub workflow automation and uses official GitHub tooling, but its autonomous loop can execute real account-bound actions and act on untrusted GitHub content while modifying code. The main risk is autonomy and indirect prompt injection, not malware or credential theft.