product-changelog

SUSPICIOUS: the core writing purpose is plausible, but the skill expands into external CLI execution, remote screenshot/image services, broad `belt *` shell access, and transitive skill installation. Data flows are mostly consistent with changelog asset generation, yet the install path and publisher mismatch make trust weaker than a normal documentation skill.