review-claude

SUSPICIOUS. The stated purpose is plausible, but the skill achieves it by running unpinned remote third-party code with shell access and likely repo visibility. The main risk is supply-chain and transitive trust, not confirmed malware; the long-running no-interruption instruction further reduces user oversight.