plan-eng-review

SUSPICIOUS: the core review capability is legitimate, but the skill’s footprint is materially broader than plan review. Same-org provenance lowers malware concern, yet telemetry, artifact sync, transitive skill execution, and repo-modifying side actions make this a medium-risk skill that should be used with caution.