changes-review-loop

SUSPICIOUS: the skill’s purpose is coherent for code-review automation, but it grants broad autonomous repo-editing authority and relies on opaque internal child skills/subagents whose trust and scope are not established here. No clear credential theft, exfiltration, or overt malware behavior is present.