recipe-build

SUSPICIOUS: the skill’s purpose and local repo actions are coherent, and there is no visible credential theft or external exfiltration. Risk comes mainly from autonomous commits plus mandatory loading of multiple unreviewed dependent skills/subagents, which expands trust beyond what is inspectable here.