review-pr

SUSPICIOUS: the skill's GitHub review capabilities broadly match its stated PR-review purpose, but it combines autonomous public posting under the user's identity, hidden automation markers/no AI disclosure, transitive sub-skill/plugin execution, and processing of untrusted PR content with write access. No direct credential theft or off-platform exfiltration is shown, so this is not confirmed malware, but it is a high-risk review automation skill.