release-notes

SUSPICIOUS: the skill’s goal is mostly coherent, but it relies on a mismatched and not clearly verifiable external CLI (`aso` vs verified `asc`). That provenance inconsistency makes the install/execution trust weaker than expected for a simple release-notes writer, though there is no strong evidence of credential theft or malicious exfiltration.