parley

SUSPICIOUS. The GitHub review workflow is purpose-aligned, and the intended API target is GitHub, but the skill's core dependency is a locally bootstrapped `scrutiny` binary with unverifiable provenance. Because that binary is central to fetching comments, spawning agents, and performing commit/push/reply actions, the install/execution trust issue is disproportionate enough to make the skill high risk even without confirmed malicious data exfiltration.