cloud-infra-automation-hardened

SUSPICIOUS. The stated purpose matches cloud automation, and the guardrails are safety-oriented, but the skill’s actual executor (`./cloud.sh`) is missing and therefore unverifiable. Because the core behavior is hidden while the skill would operate with high-privilege cloud credentials and destructive capability, the overall security risk is high even without direct evidence of malicious exfiltration.