aim-ops

SUSPICIOUS. The skill’s capabilities broadly fit a server-operations role, and its data flows mainly stay on the user’s host or their own instance. However, it depends on a separate unnamed ops repo/fork to build and distribute the actual images, creating a meaningful supply-chain trust gap; it also materializes resolved secrets into a local env file during rehearsal. No clear credential exfiltration, malicious pre-execution, or stealth behavior is present.

This is an administrative SQLite migration and history-repair script, not evident malware. It has high-impact behavior by design because it executes selected SQL files and modifies schema history. It should only be run with trusted arguments, SQL directories, checksum files, and database access. Independent checksum verification, path confinement for migration files, failure on foreign-key violations, and handling of empty history would improve safety.