review-github-pr

SUSPICIOUS: the skill’s core purpose is coherent and its dependency/install path is official, but it combines untrusted PR content with command execution from repository-controlled `CLAUDE.md`, creating a meaningful prompt-injection and arbitrary-command risk. Credential flow is otherwise proportionate and direct to GitHub, and review posting is gated by explicit user confirmation.