pr-review-loop

SUSPICIOUS. The core PR-review workflow is coherent and mostly purpose-aligned, but the skill materially expands its trust boundary by dynamically fetching and applying third-party skills with `npx skills use`, plus autonomously committing and pushing changes. The main concern is transitive trust and prompt-injection exposure from remote skill content, not confirmed malware or credential theft.