github-code-review

SUSPICIOUS: the skill’s GitHub review behavior mostly matches its stated purpose, but it relies on an unpinned third-party npm CLI for core processing and forwards PR data into it. Its ability to auto-comment, approve, and merge PRs plus a comment-driven webhook exec example make the scope higher risk than a simple review guide, though there is no clear evidence of deliberate credential theft or malware.

This is workflow documentation rather than an executing source file. It includes an unsafe webhook example vulnerable to shell command injection through untrusted PR comments and identifiers, and omits webhook signature verification. Treat that example as insecure; use argument-based process invocation, strict command allowlisting, payload validation, and signature verification. No clear malware behavior is present in the supplied file.