review-game

SUSPICIOUS: the core review behavior is coherent and low risk, but the skill is not fully consistent with its read-only purpose because it includes deployment commands and a call to an unverifiable external local script. Risk is driven by scope creep and hidden trust in `publish.sh`, not by confirmed malicious behavior.