classify-review

Mostly coherent with its stated PR-comment false-positive filtering purpose. Main risk is the required but unreviewed local updater script plus moderate prompt-injection exposure from sending untrusted review comments to a subagent that can trigger a Bash-driven state update; data flow otherwise appears proportionate and directed to official Anthropic services.