PR Labeler
Reads a PR diff and suggests labels. Its allowed-tools is exactly [Read] —
the one capability the task needs, and nothing more. Delivered over MCP, this
narrow, task-matched request is what a host can reasonably approve per skill.
No shell, no write, no network.