create-peer-review

SUSPICIOUS: the visible behavior mostly matches a paper-review skill, but trust boundaries are unclear. The main risks are broad transitive composition, unspecified local executables (`run.sh`, `/scillm batch.py`), and external-content processing with Bash access; these raise medium security concern without clear evidence of credential theft or overtly malicious intent.