deploy-website

SUSPICIOUS: the skill's overall purpose is legitimate and its tool use mostly matches local web preview/deployment, but executing startup commands inferred from README/AGENTS and running dependency installers on arbitrary repositories creates medium risk. Main concern is repo-content-driven command execution and prompt injection, not clear malware or credential theft.