auto-review-loop-llm

SUSPICIOUS. The core purpose is coherent, but the skill is over-privileged for a review loop, exports project content to external LLM services, relies on a separately trusted local MCP server, and explicitly directs silent Bash execution without user approval. This looks more like a risky autonomous automation skill than confirmed malware.