script-update-or-create

SUSPICIOUS: the stated purpose is coherent for a Unity editing skill, but the actual trust chain is broader than necessary. Main concerns are dependency on an unpinned third-party CLI, unclear publisher/repo provenance, possible secondary downloads, and incomplete setup instructions via another skill. No direct credential theft or overt exfiltration is shown in this artifact.