review-deep

SUSPICIOUS: the skill’s capabilities broadly match its stated code-review purpose, but it sends a packed copy of the repository through external CLIs to multiple model providers and uses an unpinned `npx` execution path. This is not clearly malicious, yet the data exposure and supply-chain footprint are substantial enough to treat as medium-to-high risk.