gcpctx-cicd

SUSPICIOUS: The skill’s purpose is coherent, and most credential flows go to official Google tooling, but it adds a third-party npm CLI into privileged CI/CD deployment paths without strong provenance or pinning. That makes the install/execution trust and credential-forwarding footprint higher than necessary for a cloud deployment helper.