studio-develop-refactor-build

SUSPICIOUS: the skill’s core refactor/edit/test purpose is coherent, but it authorizes broad code execution from repo-authored instructions and performs autonomous git push actions without explicit approval checkpoints. No clear credential harvesting or third-party proxying is present, so this looks more like a risky automation skill than malware.