staged-review-flow

SUSPICIOUS: the skill’s stated review-orchestration purpose is coherent, and it does not itself harvest credentials or exfiltrate data. The main concern is the built-in instruction to install an entire external skill repo via the skills CLI (`--skill '*'`), which expands trust scope through transitive skill installation; this is a medium supply-chain risk rather than confirmed malware.