gds-create-epics-and-stories

SUSPICIOUS: the skill's stated purpose is benign and there is no external credential routing or remote download, but it executes a project-local script at activation and allows local customization to expand reads and actions. This is mainly a local trust-boundary and workflow-execution risk, not confirmed malware.