Upgrade

SUSPICIOUS. The skill’s research purpose broadly matches its capabilities, but its footprint is wider than a simple upgrade recommender: it mandates a local network POST, executes several external/local tools, allows user override files, and processes large volumes of untrusted content while retaining write/exec ability. The main concern is indirect prompt injection and moderate install/runtime trust gaps rather than confirmed malware.