dd-cli-usage

SUSPICIOUS: the skill's purpose matches DoorDash ordering, but it relies on an externally installed `dd-cli` with unverifiable public provenance and enables autonomous real-world purchases. No direct exfiltration or overt malicious behavior is shown, but the trust and action scope are high risk for an AI skill.