babysit-pr

SUSPICIOUS: The skill's purpose matches PR maintenance, and the named external CLIs are official, but it grants an AI agent high-impact autonomous capabilities: repeated polling, code changes, command execution, public replies, thread resolution, and pushing commits. Its biggest risks are autonomy abuse and indirect prompt injection from review comments/CI logs combined with write/exec permissions.