appstore-assets

SUSPICIOUS. The core behavior mostly matches the stated purpose of generating App Store assets, and there is no obvious credential harvesting or exfiltration. The main risk is install/execution trust: it depends on a third-party CLI and can acquire additional skills transitively, which expands the trust boundary beyond what is fully pinned in this skill.