cull-release

SUSPICIOUS. The stated purpose and visible capabilities mostly align with a release-orchestration skill, and public evidence supports Cull's same-org GitHub/Homebrew distribution. However, the skill performs high-impact publication actions and depends on undocumented local helper commands whose provenance and behavior are not verifiable from the snippet, so risk is medium even without clear malicious data exfiltration.