cs-build-getting-started

SUSPICIOUS: the skill's stated purpose mostly matches its behavior, but it relies on a globally installed external CLI, executes scripts from a separate sibling skill, and sits on a transitive trust chain with some publisher-source inconsistency in official docs. I see no confirmed malware or clear exfiltration, but the install/execution trust is higher-risk than a simple onboarding helper and warrants caution.