workflow-ship-change

BENIGN in purpose alignment, but HIGH operational risk: this skill is explicitly designed to let the agent perform autonomous repository pushes and production deployments. No clear malware or credential-harvesting behavior is present, yet the real-world release authority and reliance on opaque local scripts make it a sensitive skill that should be tightly trusted.