vibers-code-review

SUSPICIOUS. The skill’s purpose matches external code review, but it requires high trust: a third-party GitHub Action from a personal publisher, collaborator access for that same personal account, public exposure of the project spec, and off-platform transfer of repo review data to Vibers infrastructure. This is not confirmed malware, but the install trust and data-flow footprint are broad enough to make it high security risk for private or sensitive repositories.