ac-writing-blog-posts

SUSPICIOUS: the core writing functionality is benign and well-scoped, but the skill expands into credentialed promotion/publishing workflows. The main concern is forwarding a dev.to API token to a non-official third-party CLI (`devto-cli`), plus enabling public posting actions; these behaviors fit the skill’s purpose but increase security risk beyond a simple writing assistant.