asc-new-app-release

SUSPICIOUS: the skill’s behavior broadly matches its stated App Store release purpose, but it routes sensitive publishing actions and credentials through a third-party CLI, uses a private session-based API path, and can autonomously perform high-impact external submission steps. This is not confirmed malware, but it is medium risk and warrants explicit user approval for each release action.