cc-pr-review-ci

This is a GitHub pull-request review automation script, not clearly malware. Its main security concern is shell command injection through unvalidated GITHUB_REPOSITORY or PR_NUMBER values. Risk depends on whether those environment variables can be influenced by untrusted pull-request data or workflow inputs. Report contents may also be exposed in CI logs on failure.