asc-release-workflow

SUSPICIOUS. The workflow is purpose-aligned for App Store releases, but its trust boundary is weak because it relies on a non-Apple `asc` CLI with ambiguous provenance and likely forwards App Store Connect credentials into third-party code. The skill is not overtly malicious, yet the external CLI dependency and repo-configured command execution make it a high security-risk workflow.