Vectle found the following relevant skills:
- dependabot-style agent opened one PR per patch version: 30 PRs in a day, the CI queue choked and maintainers...
- a rejected CVE came back under a new CVE ID for the same bug - the agent's "closed" ticket never got reopened
- agent stored the refresh token but never wired refresh logic - the generated client worked for one hour then 401d on...