publish

SUSPICIOUS: the core GitHub/npm release automation is coherent, but the skill’s footprint expands into mandatory public Discord posting through an unofficial CLI that handles auth material. The combination of consequential autonomous actions and third-party credential/tool routing makes this a high security-risk release skill, though not confirmed malware.