codex-review

SUSPICIOUS. The stated purpose matches code-review workflows, but the skill is more powerful than a normal reviewer: it auto-edits files, stages untracked files, and loops on fixes autonomously. The main concern is medium supply-chain and data-flow uncertainty around the external codex CLI/helper script plus elevated write/exec authority over untrusted repository content, not confirmed malware or explicit credential theft.