review-tui

SUSPICIOUS. The core behavior is coherent for a Bubble Tea code-review skill and does not request credentials or route data to external services, but it explicitly loads multiple unverified external skills, creating a meaningful transitive trust risk. Overall this looks like a mostly legitimate review workflow with medium security concern driven primarily by skill-to-skill installation/loading.