gpc-release-flow

The skill aligns well with its stated purpose: it orchestrates Google Play release workflows using a dedicated CLI, involving local artifacts and authenticated API calls to Google services. Data flows are confined to local inputs (AAB, release notes) and official Google Play endpoints, with appropriate user oversight prompts (dry-run, confirm track). No evident credential harvesting, suspicious downloads, or out-of-scope access patterns are observed. Overall risk is low to moderate (benign), primarily limited to standard credential management and API interaction considerations inherent to release tooling.