devops-deploy

SUSPICIOUS. The skill’s capabilities largely match its DevOps/deploy purpose and use mostly official tooling, so it is not malware-like. However, it automates real production actions, forwards long-lived AWS credentials in CI, and sends deployment metadata to Telegram/Codecov, which makes the trust and blast radius higher than a simple documentation skill.