review

SUSPICIOUS. The stated purpose is PR review, but the skill’s footprint is much broader: it executes many opaque local binaries, writes persistent analytics and learnings, offers remote telemetry/artifact sync, invokes external review tooling, and can modify repo files and create commits. These capabilities may belong to the broader gstack ecosystem, but for a single review skill they are disproportionate and rely on unverifiable helper executables, raising security risk without clear evidence of confirmed malware.