qe-github-release-management

SUSPICIOUS. The skill’s capabilities broadly match GitHub release management, and most data flows go to official GitHub/npm/Docker endpoints. The main risk is proportionality and execution trust: it automates high-impact public/deployment actions and relies on npm-fetched `claude-flow` tooling, including mutable `@alpha` executions, in environments holding `GITHUB_TOKEN` and `NPM_TOKEN`. This looks coherent rather than overtly malicious, but the credential-forwarding and unpinned runtime dependency make it medium risk.