gh-pr-codex-review-loop

SUSPICIOUS. The skill’s GitHub-focused capabilities generally match its stated PR review purpose and use official GitHub tooling, so there is no strong evidence of credential theft or malware. However, it grants an agent broad autonomous repository write powers—including push, thread resolution, and squash merge—and relies on an unseen bundled script, making the overall risk medium.