cli-build

SUSPICIOUS: the main skill is largely a benign documentation/workflow guide for building safer CLIs, with no direct credential collection or exfiltration. The notable issue is transitive skill installation and remote skill consumption (`Railly/cligentic` via `skills add` or GitHub), which expands the trust boundary and creates medium supply-chain risk disproportionate to a purely advisory guide.