blog-publish

SUSPICIOUS: the core build-and-deploy behavior fits the stated blogging purpose, and the deploy commands reference legitimate official tooling. The main risks are autonomous public posting and transitive trust from instructing the agent to invoke other skills; these are proportionate to the publishing goal but still materially increase risk.