code-review

SUSPICIOUS. The core code-review behavior is coherent and mostly local, but the instruction to invoke /setup-witify-skills introduces unverifiable transitive trust, and the skill exposes sub-agents to untrusted repo/spec content with potential tool access. No direct malware or credential theft is evident, but the setup and prompt-injection surface make this higher risk than a normal documentation-only review skill.