setup-client-website

SUSPICIOUS. The skill’s capabilities mostly align with its stated website-onboarding purpose, and its install/deploy tooling appears to use official sources. However, it has a broad operational footprint: it audits external sites, edits multiple local repos, provisions cloud/DNS infrastructure, creates GitHub repos/workflows, and hands off to shared SEO automation. This is not clearly malicious, but it is high-trust internal automation that should only run with strong user approval and environment isolation.