alan-review-pr

SUSPICIOUS: The skill’s stated PR review purpose mostly matches its behavior and it avoids direct credential scraping, but it routes repository and PR data through opaque third-party MCP tools with hidden authentication and grants broader GitHub write actions than strictly necessary. Main concerns are intermediary data flow, unverifiable MCP trust, and prompt-injection exposure from untrusted PR content.