plan-eng-review

SUSPICIOUS. The core review purpose is plausible, and the helper binaries appear tied to the same gstack publisher, but the skill’s footprint is much broader than a normal plan-review guide: extensive local file access, many executable helper dependencies, eval/source of helper output, optional remote telemetry, project-file mutation, auto-commit behavior, and transitive execution of another skill. This looks like an overpowered orchestration skill rather than focused review-only logic. Not confirmed malware, but the scope and trust requirements are disproportionate enough to warrant caution.