deploy

The skill is largely aligned with its stated deployment purpose and uses official ecosystem services, so it is not malware. However, it is high-impact: it can modify CI/CD and infrastructure files, execute deployment commands, and take autonomous rollback/promotion actions based on external signals and a linked agent, making it a medium-to-high operational security risk.