@554/better-skill-creator

SUSPICIOUS: The skill’s main behavior is coherent for a skill-creation guide, and it does not install unknown binaries. The primary concern is the publish workflow: it collects all skill files, mints a local OIDC token, and sends both to a Fly-hosted gateway whose official relationship is not established in the skill. That makes the external data flow and credential forwarding higher risk than a purely local documentation skill.