plan-eng-review

SUSPICIOUS: the core review purpose is legitimate, but the skill’s actual footprint is much broader than plan review alone. Same-org helper binaries and documented provenance reduce malware concern, yet transitive skill execution, config/CLAUDE.md mutation, git commits, and optional telemetry/external review make this a medium-risk skill that requires substantial trust in the gstack ecosystem.