git-pr

The skill's footprint is coherent with its stated purpose: it enables legitimate developer-oriented PR automation without introducing unusual data flows or credential handling. It relies on standard GitHub CLI interactions and does not request sensitive credentials beyond what gh would require in typical usage. Overall risk appears low to moderate, primarily tied to proper handling of GitHub authentication and ensuring the agent uses the correct repository context.