full-repo-review

SUSPICIOUS. The stated purpose is coherent for repo review, but the skill executes an unverifiable local script and delegates core behavior to an unseen workflow while processing untrusted repository content with Bash and Write access. No direct exfiltration or credential theft is shown, so this is high security risk rather than confirmed malware.