bridge-review

SUSPICIOUS: the stated purpose is coherent, but the required external agent-bridge dependency is under-specified and ambiguously sourced. The main risk is supply-chain/provenance uncertainty and possible forwarding of repo context or credentials into third-party agent CLIs; behavior is not clearly malicious, but trust and data-flow boundaries are insufficiently defined.