code-reviewer

This skill is coherent for code review and uses official developer tools, so it does not look malicious. However, it is higher-risk than a read-only review guide because it checks out untrusted PR branches and may run repository-controlled scripts, while also consuming untrusted PR text that could prompt unsafe agent behavior.