release-workflow

SUSPICIOUS. The skill's capabilities mostly fit its stated release-audit purpose, and its core tooling (`gh`, npm `skills`) is documented and verifiable. The main concern is proportional transitive trust: install verification requires fetching another skills collection from GitHub through the `skills` CLI, which expands trust to third-party skill content and uses a broad `--agent '*'` scope. No clear credential theft, covert exfiltration, or malicious mismatch is present, but the remote-write authority plus transitive skill installation makes this medium risk rather than benign.