Open Code Review

Scan AI-generated code for hallucinated packages, stale APIs, security anti-patterns, and over-engineering. Use when: (1) reviewing PRs with AI-generated cod...

This skill probably does what it claims (code scanning) but relies on remote services that could receive your repository contents. Before installing or running: (1) confirm where scans are executed (local vs remote) and read the MCP/npx endpoints' privacy/data-retention terms; (2) avoid running deep-scan modes until you know which API key/environment variables are required and how they are used; (3) prefer self-hosting the MCP server or running the CLI in an isolated sandbox if you must scan private code; (4) do not provide repository secrets or wide-scoped tokens to the tool; (5) if the MCP URL or domain looks unfamiliar (the worker.dev host here), treat it as untrusted until you can verify ownership. If you need higher assurance, request the maintainer to declare required env vars, provide a reproducible local install flow, and document data handling.

Type: OpenClaw Skill Name: open-code-review Version: 1.0.0 The skill bundle is classified as suspicious because it directs the AI agent to use an external MCP server hosted on a Cloudflare Workers domain (v2ray-seins.workers.dev) that uses a name associated with proxy/circumvention software, which is highly unusual for a code analysis tool. The instructions in SKILL.md encourage the agent to execute remote code via 'npx @opencodereview/cli' and to send source code to this third-party endpoint for 'deep scans' (L2/L3 levels). While these capabilities are consistent with the stated purpose of AI code review, the combination of remote execution and the suspicious naming of the backend infrastructure poses a significant risk of data exfiltration or supply chain compromise.