asc-submission-health

SUSPICIOUS. The skill is largely coherent with its App Store submission-health purpose and does not show credential theft, hidden execution, or off-purpose exfiltration. The main risk is trust: it relies on an unofficial third-party `asc` CLI and associated skill ecosystem to handle sensitive App Store credentials and perform account-impacting actions, including web-session automation. That makes it higher risk than a pure documentation skill, but not malicious based on the available evidence.