multica-skill-update

SUSPICIOUS: the stated purpose matches the implementation, and the Multica CLI install source appears same-org and legitimate, so this is not confirmed malware. However, the skill is inherently high-trust because it bulk-installs other skills from external sources and can automate that on a schedule, creating a transitive supply-chain and prompt-injection risk that is disproportionate to a normal utility skill.