compose-preview-review

SUSPICIOUS: the skill’s purpose and capabilities are mostly coherent for local Compose UI PR review, but it relies on a transitive bootstrap that pipes a mutable raw GitHub script to bash and installs an external CLI from a personal account. No strong evidence of credential theft or covert exfiltration is present, so this looks like supply-chain/install-trust risk rather than malware.