flag-cleanup

SUSPICIOUS: The skill’s purpose, API usage, and file-edit workflow are internally consistent with GrowthBook flag cleanup, and its data flows target official service endpoints. The main security concern is trust in the bundled `gb-call` helper: it receives `GB_API_KEY` and performs networked mutations, but its provenance and behavior are not independently verifiable from the skill text, so the overall risk is medium-high despite otherwise coherent design.