local-review

SUSPICIOUS: the skill's core purpose is coherent, but it performs risky actions on untrusted branch contents by checking out a user-specified fork and running `make setup` before review. The main concern is execution of external code plus copying local Claude settings into that environment; this is more a high-risk review automation pattern than confirmed malware.