create

SUSPICIOUS: The skill is broadly aligned with plugin creation and shows no credential theft or covert exfiltration, but it is higher risk than a normal scaffolder because it can autonomously commit, push, trigger release automation, and invoke multiple other skills/tasks. Main concern is scope expansion and transitive trust, not confirmed malware.