dbs-update

SUSPICIOUS: the skill’s purpose matches its behavior, but it updates another skill via a third-party CLI using unpinned remote content from a personal GitHub repo and installs it globally across agents. This is primarily a supply-chain and transitive-trust risk, not confirmed malware or credential theft.