release-watch

SUSPICIOUS. The stated capability is coherent with release monitoring and the GitHub token scope is proportionate, but the execution trust story is incomplete: the skill relies on unverified local runtime commands and optional bootstrap scripts without clear install provenance. Data flows appear aligned with purpose and there is no clear exfiltration behavior, so this is not confirmed malicious, but it carries medium security risk due to runtime trust uncertainty.