dbcli

SUSPICIOUS: The skill’s database capabilities broadly match its stated purpose, but it grants an AI agent high-impact write/restore operations and forwards raw DB credentials to an external CLI whose exact local provenance is not shown in the skill. The TLS example further weakens trust. This looks coherent but medium risk rather than benign.