project-scripts

The skill is coherent with its stated purpose: it defines a portable, bash-based life-cycle scripting pattern with an optional mise integration and multi-runtime adapters. The security footprint appears benign, with no use of unverifiable binaries, credential harvesting, or external data exfiltration patterns described. Data access is limited to workspace scripts and env/configs, consistent with its goal of standardizing project lifecycle actions. Overall risk is low to moderate, contingent on authorship of scripts themselves, but the described framework itself does not introduce evident high-risk data flows or supply-chain concerns.