review-pr-check

SUSPICIOUS. The skill’s GitHub review and repo-manipulation capabilities largely match its stated PR-review purpose, and the scanner’s command-injection hits are documentation artifacts. The main risk is install/execution trust and scope: it depends on a third-party personal gh extension as a core control-plane dependency, then uses GitHub-authenticated actions plus autonomous code changes, push, and PR interactions. That is coherent but high-trust and broader than a low-risk helper skill.