repo-align

SUSPICIOUS due to install trust, not behavior. The capability set is coherent for repository hygiene and GitHub settings alignment, and data flows stay within local repos, npm, and GitHub. The main concern is dependence on an unverifiable locally built personal CLI (kscripts), which raises security risk even though the skill's scope and actions otherwise match its stated purpose.