product-changelog

SUSPICIOUS. The core writing guidance is benign, and the referenced inference.sh CLI appears to be an official same-org tool rather than an obviously rogue payload. However, this skill goes beyond simple changelog writing by requiring an external CLI, routing content through platform-hosted apps, and instructing users to install additional skills via a third-party skills CLI. The main concerns are supply-chain/install hygiene and transitive trust, not confirmed malware.