There is a pending
PR that uses
keywordlabeler to automatically label PRs and issues. Installing the app requires giving it write permissions to PRs and issues. This isn't different than with the current labeler, but I note that we don't have a procedure for deciding such issues that may have security implications. So I am posting here before proceeding with app installation.