review-squash-message

SUSPICIOUS. The skill’s purpose is coherent, and there is no evidence of credential harvesting, remote payload download, or off-purpose data exfiltration. However, it uses load-time pre-execution and passes $ARGUMENTS into bash without visible quoting, creating a meaningful command-execution risk that is disproportionate to a review-only skill unless the local script safely handles inputs.