github-code-review

SUSPICIOUS. The stated purpose matches GitHub code review automation, but the footprint is high-risk: it combines untrusted external content, third-party CLI/package execution, and autonomous GitHub actions such as commenting, approval, push, and merge. Without stronger provenance for ruv-swarm/claude-flow and tighter guardrails on comment-triggered execution, the skill is not proportionately scoped for safe agent use.