delegate-review

SUSPICIOUS: the skill’s review purpose broadly matches its capabilities, but it forwards repository diffs and local guidance to external model harnesses and depends on another skill for routing behavior. Main concerns are transitive skill trust, unverified external couriers beyond codex, and prompt-injection exposure from untrusted PR content rather than confirmed malware.