start-cloud

SUSPICIOUS. The visible skill is broadly consistent with a cloud deployment orchestrator, but its trust footprint is larger than the text suggests: it delegates critical actions to unreviewed downstream skills and deploys from a mutable personal GHCR image. No clear credential exfiltration or malware behavior is shown in this file, but the transitive trust and supply-chain risks are significant enough to classify it as suspicious rather than benign.