dbmap

SUSPICIOUS. The skill’s purpose is coherent, but its core behavior depends on cloning and executing a personal GitHub helper that reads project DB configs and receives real DSNs. That external-tool trust and credential forwarding are disproportionate enough to make the skill high risk, even without clear evidence of malware or exfiltration.