code-reviewer

SUSPICIOUS. The core purpose is legitimate, but the footprint is riskier than a passive review guide because it combines untrusted remote PR content with checkout and execution of repo-defined commands. The main concern is indirect prompt injection and unsafe execution against untrusted PRs, not clear malware or credential theft.