rhdh-pr-review

SUSPICIOUS. The core PR-review purpose is coherent, and GitHub posting is proportionate, but the mandatory dependency on an external /code-review skill and the instruction to install/load other skills introduce significant transitive trust risk. No direct credential theft or hidden exfiltration is evident from this skill alone, but the external-skill dependency makes the overall workflow riskier than a self-contained review skill.