production-ready-hardener

SUSPICIOUS: the skill’s stated purpose matches a production-readiness audit, and there is no clear malware behavior, remote payload, or credential harvesting in the provided text. However, its very broad orchestration scope, delegation to many other skills, optional execution of local commands on arbitrary projects, and possible routing of code context to third-party services create a moderate trust and data-handling risk disproportionate to a simple checklist skill.