bootstrap-monorepo

SUSPICIOUS. The skill is largely coherent with its stated monorepo-bootstrap purpose and uses mostly official ecosystems, but it combines autonomous execution with shell installers and GitHub release/push capabilities. Risk is driven more by execution trust and autonomous repo actions than by evidence of malware or credential theft.