copilotkit-self-update

SUSPICIOUS. The skill's purpose matches its behavior, but it asks the agent to install remote skills through a third-party CLI, creating a transitive trust chain. The risk is elevated by stale guidance pointing at an archived repo and unpinned remote content, though there is not enough evidence of outright malicious intent or credential theft.