gamma-deploy-integration

SUSPICIOUS: The skill’s purpose is legitimate and most data flows are coherent with deployment tasks, but it recommends a third-party GitHub Action that receives Vercel deployment credentials instead of the official Vercel CLI workflow. That makes the install/execution trust and credential-forwarding footprint riskier than necessary, though not outright malicious.