pr-review-loop

SUSPICIOUS. The skill is purpose-aligned and uses official GitHub tooling/endpoints, so it does not look like credential theft or malware. However, it gives an AI agent autonomous ability to modify code, push commits, post PR comments, and resolve threads while processing untrusted reviewer content, creating medium-to-high operational and prompt-injection risk.