package-valkey-green

SUSPICIOUS: the core behavior is mostly coherent for a Valkey deployment skill, including cloud credentials, SSH access, backups, and recovery checks. The main risk is transitive trust from installing an unpinned external skill repo via `npx skills add`; absent stronger verification of the exact target, this raises medium supply-chain risk but there is no strong evidence of malicious exfiltration or behavior outside the stated purpose.