app-platform-troubleshooting

SUSPICIOUS. Most shell/log/file capabilities fit the stated troubleshooting purpose, but the skill's footprint expands materially by recommending a non-DigitalOcean third-party debug container that receives database and service credentials. That credential-forwarding supply-chain pattern is the main risk; the static command-injection and hardcoded-secret findings are mostly documentation false positives.

This content is live-operations troubleshooting guidance rather than embedded malware. It contains highly privileged capabilities and several credential-disclosure risks, particularly arbitrary shell execution, environment dumping, database credential use, file upload, and process signaling. No explicit malicious behavior or obfuscation is present, but the instructions should only be used in an authenticated, authorized environment with sensitive output redacted.