ship-it

SUSPICIOUS: The skill’s purpose largely matches its capabilities for software delivery orchestration, and I found no credential theft, covert exfiltration, or hidden behavior. The main concern is transitive trust: it asks the agent to install and rely on another third-party skill, plus it defaults to aggressive delegated execution and ongoing monitoring, which is more autonomous than strictly necessary.