commit

SUSPICIOUS: the core commit workflow is benign and well-aligned with Git usage, but the final instruction to `git push` materially conflicts with the stated purpose of creating a commit without pushing. No malicious installer, credential harvesting, or hidden exfiltration is present, yet the autonomous push step makes the skill overreach its declared scope.