pi-code-review

SUSPICIOUS: The skill's purpose matches a code-review workflow, and the referenced Pi CLI appears to be an official, same-org tool rather than an obviously fake payload. However, it delegates local repository contents to an external AI service and gives that external reviewer bash capability while processing untrusted code, creating notable data-exposure and prompt-injection risk that is disproportionate to a simple read-only review helper.