peer-review

SUSPICIOUS. The skill's purpose is coherent, but it expands trust by spawning a second Claude instance, bypassing a built-in spawn guard, and routing code-review content through a third-party conductor mesh loaded with a dangerous development-channels flag. This is not confirmed malware, but the external MCP dependency and asynchronous peer-agent behavior make it medium-high risk.