create-railcode-app

SUSPICIOUS: the skill is largely coherent with its stated purpose as an official Railcode app-building guide, and most commands/data flows target expected official Railcode, npm, and GitHub endpoints. Risk comes from transitive skill installation, mutable `latest` installs, GitHub branch downloads, and optional telemetry submission through a hidden feedback command. These are disproportionate enough to merit caution, but not fundamentally incompatible with the claimed purpose.