gemini-review-code

The skill is purpose-aligned and uses a verifiable same-product external CLI, so it is not malware. However, it delegates local code and repo context to a cloud agent that can auto-run tool calls on untrusted diff content, making prompt-injection and data-exposure risks material. Overall: suspicious/high-medium risk for use on untrusted repositories, but benign in intent.