when-releasing-software-use-github-release-management

SUSPICIOUS: the core release-management behavior is coherent, but the skill couples that high-impact authority with a third-party alpha CLI/MCP ecosystem and broad autonomous deployment actions. No direct credential theft or exfiltration is evident, yet the supply-chain and operational trust footprint is medium-to-high for a release skill.