gitlab-mr-review

SUSPICIOUS: the core MR review behavior is coherent and mostly proportionate, but the install guidance is inconsistent with GitLab's official MCP path and directs users to third-party server code that will handle GitLab credentials. Data flows otherwise stay within GitLab/local repo scope, and actions are gated by explicit confirmation, so this is not confirmed malware.