ship

The skill’s actions are broadly aligned with a release/ship workflow and use standard Git/GitHub tooling, but it grants the agent high autonomy to modify code, commit, push, and open a PR without per-action user approval. That makes it suspicious from an operational-risk perspective rather than malware: coherent purpose, but overly autonomous and externally effectful.