sales-request-skill

SUSPICIOUS: the skill is largely aligned with its stated purpose and uses official GitHub tooling, but it requires autonomous public GitHub actions and includes a transitive skill-install instruction. Risk comes from write/push/post behavior and unverified target-repo trust, not clear malware or credential theft.