github-release-management

SUSPICIOUS: the skill’s overall purpose is coherent for GitHub release automation, and most data flows target official GitHub/npm services. Risk comes from broad autonomous release/deployment capabilities and reliance on a third-party orchestration CLI via npx, especially mutable @alpha tags, which expands trust and impact beyond a minimal release helper.