reviewing-rails-code

SUSPICIOUS. The core Rails review behavior is coherent and low-risk, but the skill instructs the agent to install another third-party skill via an unpinned `npx skills@latest` command. That transitive install path raises medium security risk even though there is no direct credential access, exfiltration, or malicious execution in the main review flow.